s3crets_scanner

S3cret Scanner: Hunting For Secrets Uploaded To Public S3 Buckets S3cret Scanner tool designed to provide a complementary layer for the Amazon S3 Security Best Practices by proactively hunting secrets in public S3 buckets. Can be executed as scheduled task or On-Demand Automation workflow The...

CloudBrute

CloudBrute Uno strumento per trovare l'infrastruttura, i file e le app di un'azienda target sui principali provider cloud Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode. Il risultato è utile per cacciatori di bug bounty, red teamer e penetration tester. Il resoconto completo è...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

aws_pwn

AWS pwn Resumo Esta é uma coleção de scripts terrivelmente escritos para realizar várias tarefas relacionadas a testes de penetração na AWS. Por favor, não fique triste se não funcionar para você. Pode ser que a AWS tenha mudado desde que uma determinada ferramenta foi escrita ou pode ser que o...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

sisu

sisu ⚡ Il tuo AWS, come file system. Questo: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Invece di questo: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

sss3

SSS3 Scanner de Armazenamento Simples SSS3 é um software simples de teste de buckets S3. Ele usa a AWS CLI para buscar buckets públicos em uma lista de domínios/subdomínios. Requisitos Básicos Requer a AWS CLI instalada e configurada com uma política S3 definida Você deve ter uma lista de...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

poro

poro Descrizione Scansiona le risorse accessibili pubblicamente nel tuo ambiente AWS Servizi coperti da questo strumento: AWS ELB API Gateway Bucket S3 Database RDS istanze EC2 Database Redshift Poro controlla anche se un tag specificato è applicato alle risorse pubbliche identificate usando gli...

s3reverse

s3reverse Install go get root@kitploit: $ go get -u github.com/hahwul/s3reverse snap root@kitploit: snap install s3reverse brew...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

S3BucketList

S3BucketList Cerca, elenca e controlla i bucket S3 trovati nelle richieste di rete mentre navighi. Funzionalità Filtra i bucket S3 Estrae le autorizzazioni ACL Scarica i bucket registrati Gestisci i bucket registrati Registrazione bucket specifica per scheda Rileva bucket non rivendicati / in...

s3dns

S3DNS s3dns è un server DNS leggero che aiuta a scoprire bucket di cloud storage AWS S3, Google Cloud Storage e Azure Blob risolvendo richieste DNS, tracciando i CNAME e confrontando i pattern URL noti dei bucket. È un pratico compagno per pentester , cacciatori di bug bounty e analisti di...

S3-from-csp

S3-from-csp Estrae tutti i bucket S3 dagli header dei report CSP e poi testa le vulnerabilità di upload dei file Installazione root@kitploit: go install github.com/RandomRobbieBF/S3-from-csp@latest Esecuzione root@kitploit: s3fromcsp file.txt...

Linux Distros Unpatched Vulnerability : CVE-2026-18692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to b...

UBUNTU-CVE-2026-18692

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

PT-2026-70849

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

CVE-2026-68157

CVE-2026-68157 affects the Linux kernel’s libceph CRUSH processing. When a malformed CRUSH map contains a parent bucket with a name but without a matching type, get_immediate_parent() dereferences a NULL type_cn and passes a NULL into strcmp(), causing a null-ptr-deref and potential system crash ...