flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

s3sec

s3sec Тестирование AWS S3 бакетов на доступ на чтение/запись/удаление Этот инструмент был разработан для быстрой проверки списка s3 бакетов на публичный доступ на чтение, запись и удаление в целях тестирования на проникновение в программах bug bounty. Screenshot Нашли баг с помощью этого...

s3-account-search

S3 Account Search This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install root@kitploit: GO111MODULE=on go install...

goGetBucket

goGetBucket – Erkennung von AWS S3 Buckets durch Änderungen und Permutationen Warnung: Der Code ist schrecklich, da ich ihn nur für den persönlichen Gebrauch genutzt habe. Wenn ich Zeit habe, werde ich ihn weniger schrecklich und schneller machen. Bei der Aufklärung einer Domain ist es sehr...

sandcastle

Inspiriert durch ein Gespräch mit @nickelser von Instacart auf HackerOne, habe ich Sandcastle optimiert und veröffentlicht – ein Python-Skript für die AWS S3 Bucket-Enumeration, ehemals bekannt als bucketCrawler. Das Skript nimmt den Namen eines Ziels als Stammargument z.B. shopify und durchläuft...

binaryalert

BinaryAlert: Rilevamento malware serverless, in tempo reale e retroattivo .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image::...

bucket-brute

bucket-brute Strumento Aws S3 Tko root@kitploit: usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Esempio...

CVE-2025-2825

CVE-2025-2825 - CrushFTP WebInterface Authentifizierungsumgehung CVE-2025-2825 PoC Dieses Skript nutzt die Schwachstelle zur Authentifizierungsumgehung in CrushFTP in den folgenden Versionen aus: 10.0.0 10.8.3 11.0.0 11.3.0 Funktionsweise Die AWS-S3-Authentifizierung von CrushFTP kann umgangen...

htb-facts

HTB — Facts Easy/Linux - Stagione 10 Riepilogo Facts è una macchina Linux di livello facile che richiede lo sfruttamento di una vulnerabilità nota CVE-2025-2304 in Camaleon CMS per estrarre le credenziali locali di AWS S3. L'enumerazione dei bucket S3 interni rivela una chiave privata SSH che dev...

s3-leaks

s3-leaks Liste der AWS-S3-Lecks Wenn dir weitere Lecks bekannt sind, sende gerne einen PR...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: act, fuse-overlayfs-snapshotter, helm, redpanda, crossplane-provider-aws-firehose, sigstore-scaffolding, nri-couchbase, kaniko, azcopy, kube-fluentd-operator, consul-k8s, grafana-rollout-operator, harbor-registry, envconsul, cis-operator, src-fingerprint,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: act, helm, cosign, wolfictl, crossplane-provider-aws-firehose, splunk-otel-collector, argo-cd, kargo, gitea, docker-machine-driver-linode, terraform-provider-acme, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, cosign, ip-masq-agent, crossplane-provider-aws-firehose, nri-couchbase, redis-operator, azcopy, grafana-rollout-operator, harbor-registry, local-static-provisioner, src-fingerprint, docker-machine-driver-linode, openbao-k8s,...

CVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

PT-2026-71879

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

CVE-2026-11976

MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: act, cosign, custom-pod-autoscaler-operator, mcp-grafana, argo-cd, kube-fluentd-operator, kargo, openbao-k8s, docker-cli-buildx, crane, multus-cni, kubernetes, crossplane-provider-family-azure, azure-service-operator, aactl, gitsign, volume-modifier-for-k8s,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: act, cosign, custom-pod-autoscaler-operator, mcp-grafana, argo-cd, kube-fluentd-operator, kargo, openbao-k8s, docker-cli-buildx, crane, multus-cni, kubernetes, crossplane-provider-family-azure, azure-service-operator, aactl, gitsign, volume-modifier-for-k8s,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: act, cosign, custom-pod-autoscaler-operator, mcp-grafana, argo-cd, kube-fluentd-operator, kargo, openbao-k8s, docker-cli-buildx, crane, multus-cni, kubernetes, crossplane-provider-family-azure, azure-service-operator, aactl, gitsign, volume-modifier-for-k8s,...