cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

CVE-2026-24516-DigitalOcean-RCE

CVE-2026-24516-DigitalOcean-RCE Critical Pre-Auth Root RCE CVSS 10.0 in DigitalOcean Droplet Agent up to v1.3.2 via Command Injection. CVE-2026-24516: Pre-Auth Root RCE in DigitalOcean Droplet Agent Overview A critical command injection vulnerability was discovered in the DigitalOcean Droplet Age...

BucketLoot

BucketLoot An Automated S3-compatible Bucket Inspector Description • Installation • Features • Documentation • Acknowledgements Description BucketLoot is an automated S3-compatible Bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as we...

tf-cve-2021-36782

Demo Terraform module for CVE-2021-36782 This is a Terraform module to demo CVE-2021-36782. Quick start Clone repository Run terraform init Copy example.tfvars to yourown.tfvars Edit yourown.tfvars. You just need to add a digital ocean API token Run terraform apply -var-file yourown.tfvars Give i...

CVE-2026-24516-DigitalOcean-RCE.

CVE-2026-24516-DigitalOcean-RCE. Technical analysis and PoC for CVE-2026-24516: Unauthenticated Root Remote Code Execution in DigitalOcean Droplet Agent CVSS 10.0. TECHNICAL SECURITY ADVISORY: CVE-2026-24516 ID: CVE-2026-24516 TITLE: Unauthenticated Root RCE via Metadata Poisoning & Side-Channel...

nginxconfig.io

⚙️ NGINX configuration generator on steroids 💉 The only tool you'll ever need to configure your NGINX server. do.co/nginxconfig » Report a bug · Request a feature ✨ NGINX Config NGINX is so much more than just a webserver. You already knew that, probably. We love NGINX, because: Low memory usage...

sublert

/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Author: Yassine Aboukir Version: 1.4.7 What's this about? Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains...

spaces-finder

Spaces finder Spaces finder is a tool to quickly enumerate DigitalOcean Spaces to look for loot. It's similar to a subdomain bruteforcer but is made specifically for DigitalOcean Spaces and also has some extra features that allow you to grep for delicious files as well as download interesting fil...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

cloud_ip_ranges

Cloud IP Ranges Description Most cloud providers publish up to date lists of their IP address ranges. This tools identifies if an IP belongs to a provider's ranges by fetching and parsing the latest lists. Supports: AWS source Azure source Google Cloud Platform source Alibaba Cloud currently...

offensive-docker-vps

Offensive Docker VPS Cree una VPS en Google Cloud Platform o Digital Ocean fácilmente para usar Offensive Docker y lanzar las evaluaciones a los objetivos. 🎉🎉Bono de Digital Ocean 🎉🎉 Puede registrarse con mi enlace de referencia https://m.do.co/c/0d2d40f6a8a1 y obtener $100 de crédito gratis para...

[SECURITY] Fedora 44 Update: doctl-1.169.0-1.fc44

The official command line interface for the DigitalOcean API...

[SECURITY] Fedora 43 Update: doctl-1.164.0-1.fc43

The official command line interface for the DigitalOcean API...

[SECURITY] Fedora 44 Update: doctl-1.164.0-1.fc44

The official command line interface for the DigitalOcean API...

Tugboat Configuration File Exposure Detection

A Tugboat configuration file was discovered. Tugboat is a command line tool for interacting with DigitalOcean droplets. !/usr/bin/env python3 -- coding: utf-8 -- """A Tugboat configuration file was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

DigitalOcean Key Exposure via Axiom Detection

Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments. !/usr/bin/env python3 -- coding: utf-8 -- """Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments.""" from kittysploit import from lib.protocols.http.httpclient...

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

SummaryPyLoad's download engine accepts arbitrary URLs without validation, enabling Server-Side Request Forgery SSRF attacks. An authenticated attacker can exploit this to access internal network services and exfiltrate cloud provider metadata. On DigitalOcean droplets, this exposes sensitive...

PYSEC-2026-497 pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

Summary PyLoad's download engine accepts arbitrary URLs without validation, enabling Server-Side Request Forgery SSRF attacks. An authenticated attacker can exploit this to access internal network services and exfiltrate cloud provider metadata. On DigitalOcean droplets, this exposes sensitive...

bespokelabs-curator (>=0.1.15rc1, <=0.1.15.post1), cornell (1.1.1) +21 more potentially affected by unknown CVE via vcrpy (7.0.0)

vcrpy PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - bespokelabs-curator =0.1.15rc1, =1.0.0, =0.2.16, =0.1.1, =0.1.19, =0.1.9, =0.1.0, =0.2.4rc2, =0.3.22, =2.1.0, =0.1.0, =0.0.1, =1.0.2 and more Source...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...