s3-bucket-take-0v3r

s3-bucket-take-0v3r S3 버킷 테이크오버 스캐너 및 클레임 도구 📌 설명 S3 버킷 테이크오버 스캐너 및 클레임 도구 는 Python 2.7 기반 유틸리티로, 다음을 수행합니다: 1. 도메인 이름을 스캔하여 잠재적인 Amazon S3 버킷 테이크오버 취약점을 식별합니다. 2. 등록되지 않은 S3 버킷을 자동으로 클레임하고 테스트 HTML 페이지를 업로드합니다. 이 도구는 버그 바운티 헌팅, 클라우드 자산 감사, 또는 승인된 환경 내에서의 합법적인 침투 테스트에 적합합니다. ⚙️ 기능 ✅ 여러 도메인을 스캔하여...

Google Gemini Enterprise 安全漏洞

Google Gemini Enterprise is a generative AI platform developed by Google, Inc. of the United States. There is a security vulnerability in Google Gemini Enterprise, which stems from the use of predictable Google Cloud Storage bucket names. This vulnerability may allow attackers to preemptively tak...

EUVD-2024-17207

Malicious code in bioql PyPI...

EUVD-2023-58282

Malicious code in bioql PyPI...

CVE-2023-6017

H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL...

CVE-2024-1456

An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover...

CVE-2024-1456 S3 Bucket Takeover in h2oai/h2o-3

An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover...

CVE-2023-6017

H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL...

Brave Software: S3 Bucket Takeover "brave-browser-rpm-staging-release-test"

An unclaimed S3 bucket was found on the domain hosting services of brave.com, which could have been taken over by an attacker to spread malware using the keyrings of the brave browser. The bucket was used to get keyrings of the browser in Linux distros, and it was pointing towards an unclaimed S3...