sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

GATOR

공격적 연구를 위한 GCP 공격 도구 키트 GATOR - GCP Attack Toolkit for Offensive Research , Google Cloud 환경 연구 및 익스플로잇을 위해 설계된 도구입니다. 정찰부터 영향까지 다양한 공격 단계에서 사용자를 지원하는 포괄적인 모듈을 제공합니다. 모듈 리소스 카테고리| 주 모듈| 명령 그룹| 작업| 설명 ---|---|---|---|--- 사용자 인증| auth| -| activate| 특정 인증 방법 활성화 -| add| 새 인증 방법 추가 -| delete| 특정 인증 방법...

hayat

Hayat Google Cloud Platform 감사 및 강화 스크립트 "Hayat"이 무슨 뜻인가요? 솔직히 말해서, 독특한 이름을 찾느라 고생했습니다. "Hayat"은 터키어로 영어로 "Life"를 의미하며 제 조카의 이름이기도 합니다. 그녀를 만날 준비가 되셨나요? 😍 😍 😍 Hayat은 Google Cloud Platform 서비스예: Identity & Access Management, 로깅 및 모니터링, 네트워킹, 가상 머신, 스토리지, Cloud SQL 인스턴스, Kubernetes 클러스터에 대한 감사 및 강화...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

pd-agent

ProjectDiscovery Cloud Platform — エージェント 機能 • クイックスタート • インストール • 設定 • スケーリング 機能 pd-agent を使用すると、ProjectDiscovery Cloud Platform から自分自身の 内部ネットワークをスキャンできます。 スキャン対象のネットワーク内のマシン VM、サーバー、ワークステーション、Kubernetes Pod にエージェントをインストールし、PDCP チームに接続します。クラウド UI から、プライベート IP、内部ホスト名、VPC 範囲、Kubernetes...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - 简单概念验证工具 🛠 关于此应用程序 此工具针对安全漏洞 CVE-2026-2472 提供了技术性概念验证 PoC。该漏洞影响 Google Cloud Platform 的 Vertex AI Python SDK。它涉及 SDK 中与 Jupyter 和 Colab 笔记本一起使用的部分所存在的未经验证的存储型跨站脚本 XSS 漏洞。 该软件帮助您了解此漏洞是如何被触发的。它可在 Windows 上运行，无需编程知识。您可以在自己的系统上安全地进行测试，以了解相关风险。 🖥 系统要求...

offensive-docker

Offensive Docker는 침투 테스트 환경을 쉽고 빠르게 구축할 수 있는 자주 사용되는 도구들을 포함한 이미지입니다. ➡️ 참고: VPS Google Cloud Platform 또는 Digital Ocean, 무료 크레딧 포함에서 offensive docker를 실행하는 방법은 다음 저장소를 확인하세요. Offensive Docker VPS 목차 링크 기능 요구 사항 설치된 도구 운영 체제 도구 네트워크 도구 개발자 도구 🔪 공격 도구 포트 스캐닝 🔍 정찰 서브도메인 서브도메인 탈취 DNS 조회 📷 스크린샷 🕸️ 크롤러 📁...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

kubebot

Kubebot Google Cloud Platform의 Kubernetes 백엔드로 구축된 보안 테스트 Slackbot 참고: 저는 이 프로젝트를 더 이상 적극적으로 유지보수하지 않습니다. 저와 다른 몇몇 사람들이 Kubebot v2를 작업 중이며, 이는 곧 있을 보안 컨퍼런스 중 하나에서 발표될 예정입니다. 아키텍처 데모 이 비디오를 시청하세요 - https://youtu.be/RKvtyU3CcZk 데이터 흐름 1 - Slackbot에서 시작된 API 요청도구, 대상, 옵션은 KubernetesK8s 클러스터에서 Docker...

CVE-2026-20253

🚨 CVE-2026-20253 - 重大なSplunk Enterpriseの認証なしファイル作成脆弱性 Splunk EnterpriseおよびSplunk Cloud Platformに影響を与える、認証なしの任意のファイル作成および切り詰めの脆弱性。 📖 エグゼクティブサマリー CVE-2026-20253 は、Splunk Enterprise およびSplunk Cloud Platform における重大な脆弱性であり、露出したPostgreSQLサイドカーサービスのエンドポイントを介して、認証されていないリモート攻撃者が任意のファイルを作成または切り詰めることを可能にします...

CVE-2026-90595

A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/auth/controller/OnlineController.java. The manipulation results in missing authorization. The attack can be executed...

CVE-2026-90594

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...

CVE-2026-90595 wxiaoqi Spring-Cloud-Platform OnlineController.java OnlineController.getOnlineInfo authorization

A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/auth/controller/OnlineController.java. The manipulation results in missing authorization. The attack can be executed...

CVE-2026-90595 wxiaoqi Spring-Cloud-Platform OnlineController.java OnlineController.getOnlineInfo authorization

A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/auth/controller/OnlineController.java. The manipulation results in missing authorization. The attack can be executed...

CVE-2026-90595

CVE-2026-90595 is a missing authorization flaw in wxiaoqi Spring-Cloud-Platform versions 1.0, 2.2, and 3.0. The vulnerability resides in the OnlineController.getOnlineInfo function within aceModules/ace-admin/auth/controller/OnlineController.java. A remote attacker with low privileges can exploit...

EUVD-2026-77093

A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/auth/controller/OnlineController.java. The manipulation results in missing authorization. The attack can be executed...

CVE-2026-90594

A missing authorization (fail-open) vulnerability in the Permission Service of wxiaoqi Spring-Cloud-Platform versions 3.0.1 and 3.1.0 affects the function PermissionService.checkUserPermission in /rpc/service/PermissionService.java. The flaw allows remote attackers with low privileges to bypass p...

EUVD-2026-77092

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...

CVE-2026-90594 wxiaoqi Spring-Cloud-Platform Permission Service PermissionService.java PermissionService.checkUserPermission authorization

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...