Access Control Bypass

Overview @hulumi/policies is a Pulumi CrossGuard policy packs for AWS, GitHub, Kubernetes, Cloudflare, and deployment governance. Includes HulumiHardeningPack, HulumiAwsOrgHardeningPack, state/backend/primitive/detection rules, GitHub packs, EKS packs, and platform governance. SLSA Bui Affected...

Western Digital My Cloud Home 操作系统操作系统命令注入漏洞

Western Digital My Cloud Home is an easy-to-use personal cloud storage device from Western Digital USA. It plugs directly into a Wi-Fi router to protect your digital life. Western Digital My Cloud Home suffers from an operating system command injection vulnerability that stems from an AWS S3 buck...

PayloadsAllTheThings

This repository is an offensive tool for API key and bucket S3 exploitation. It contains tools and exploits for various types of attacks, including CRLF injection, CSRF injection, and API key leaks. The repository includes a variety of scripts and modules for different types of attacks, such as...