tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

awswaf

AWS WAF Amazon Web Services Web Application Firewall Solver Overview This project provides a Golang & Python-based solver for the AWS WAF challenge. It supports both the type "token" / "Invisible" and type "Captcha" using gemini ⭐️ Show Your Support Please star the repository if you find it useful...

Grammarly fixed XSS vulnerability that bypasses AWS WAF

Grammarly is the unicorn company that announced its open bug bounty program last September. Since that time, many security researchers posted their submissions and got paid well. Some of Grammarlys issues are also useful for others. Like the recent XSS, that also bypasses an AWS WAF. The recent X...

AWS Security Hub and Deep Security

One of the biggest challenges in maintaining your security posture is visibility. You have security controls deployed throughout the stack, and each fo these tools is generating its own set of data points and has its own view of your deployment. Managing the multitude of alerts and events from...