gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install root@kitploit: GO111MODULE=on go install...

binaryalert

BinaryAlert: Detección de malware sin servidor, en tiempo real y retrospectiva .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Estado de compilación .. image::...

s3-leaks

s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

goGetBucket

goGetBucket - Descubrimiento de buckets S3 de AWS mediante alteraciones y permutaciones Advertencia: el código es horrible ya que solo lo he usado para uso personal. Cuando tenga tiempo, lo haré menos horrible y más rápido. Al realizar un reconocimiento en un dominio, entender los activos que...

CVE-2025-2825

CVE-2025-2825 - CrushFTP WebInterface Authentication bypass CVE-2025-2825 PoC This script exploits the CrushFTP authentication bypass vulnerability in versions: 10.0.0 10.8.3 11.0.0 11.3.0 How It Works CrushFTP's AWS S3-style authentication can be bypassed using: A fake but valid-looking...

sandcastle

Inspirado por una conversación con @nickelser de Instacart en HackerOne, he optimizado y publicado Sandcastle – un script de Python para la enumeración de buckets S3 de AWS, anteriormente conocido como bucketCrawler. El script toma el nombre de un objetivo como argumento base por ejemplo, shopify...

s3-account-search

Búsqueda de Cuenta S3 Esta herramienta te permite encontrar el ID de cuenta al que pertenece un bucket de S3. Para que funcione, necesitas tener al menos uno de estos permisos: Permiso para descargar un archivo conocido del bucket s3:getObject. Permiso para listar el contenido del bucket...

s3sec

s3sec Prueba los buckets de AWS S3 para acceso de lectura/escritura/eliminación Esta herramienta fue desarrollada para probar rápidamente una lista de buckets de S3 para acceso público de lectura, escritura y eliminación con fines de pruebas de penetración en programas de bug bounty. Screenshot...

bucket-brute

bucket-brute Aws S3 Tko Tool root@kitploit: usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example...

htb-facts

HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: speedtest-go, crossplane-provider-aws-rds, kuberay-operator, kubeflow-katib, cloud-sql-proxy, amazon-cloudwatch-agent-operator, crossplane-provider-aws-s3, nri-couchbase, pulumi-kubernetes-operator, traefik, delve, grafana-rollout-operator, rancher-webhook,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, trivy, crossplane-provider-aws-s3, gitlab-kas, pulumi-kubernetes-operator, traefik, buildkitd, tekton-chains, nfpm, external-dns, wal-g, openbao, osv-scanner, sops, flux-notification-controller, minio, apko, skaffold, terragrunt,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: vale, rabbitmq-messaging-topology-operator, rancher-telemetry, spegel, ytt, crossplane-provider-aws-rds, kuberay-operator, nginx-prometheus-exporter, wave, kubeflow-katib, amazon-cloudwatch-agent-operator, chart-testing, crossplane-provider-aws-s3, nri-couchbase,...

CVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

PT-2026-71879

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

CVE-2026-11976

MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: ytt, oras, wave, kubeflow-katib, kubernetes-dashboard-web, mongo-tools, amazon-cloudwatch-agent-operator, gitlab-kas, grafana-rollout-operator, aws-flb-firehose, kubeflow, kubernetes-dashboard-auth, kwok, openbao, cluster-proportional-autoscaler,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: ytt, oras, wave, kubernetes-dashboard-web, mongo-tools, amazon-cloudwatch-agent-operator, gitlab-kas, grafana-rollout-operator, aws-flb-firehose, kubeflow, kubernetes-dashboard-auth, kwok, openbao, cluster-proportional-autoscaler, flux-notification-controller,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: ytt, oras, wave, kubernetes-dashboard-web, mongo-tools, amazon-cloudwatch-agent-operator, gitlab-kas, grafana-rollout-operator, aws-flb-firehose, kubeflow, kubernetes-dashboard-auth, kwok, openbao, cluster-proportional-autoscaler, flux-notification-controller,...