CVE-2021-3456

CVE-2021-3456 A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance The Beginning: Crafting a PDF Payload It all begins on the front end of the attack. Using PowerShell’s built‑in WScript object we embed a script inside a PDF that will be...

Browser-ExternalC2

Browser-EC2...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-keycloak, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-keycloak, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-keycloak, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-keycloak, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-keycloak, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-keycloak, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...

phishlulz

PhishLulz PhishLulz es un conjunto de herramientas Ruby dirigido a automatizar actividades de phishing. Cuando inicias una campaña de phishing, se crea una instancia dedicada de Amazon EC2 Debian 7. La VM viene con varias herramientas de código abierto que se han integrado. Los dos componentes...

cloud

Cloud Monitoreando el Panorama de la Nube Nuestra misión con este proyecto es ofrecer un mapa siempre actualizado y de libre acceso del panorama de la nube para cada uno de los principales proveedores de servicios en la nube. Decidimos comenzar recolectando datos de certificados SSL de máquinas A...

autovpn

!CAUTION Este repositorio ya no se mantiene. No se proporcionarán más actualizaciones, correcciones de errores ni soporte. Utilice la nueva versión https://github.com/ttlequals0/autowire Resumen Script que permite la creación sencilla de puntos finales OpenVPN en cualquier región de AWS. Para cre...

red-detector

Red-Detector Descripción Escanea tu instancia EC2 para encontrar sus vulnerabilidades usando Vuls https://vuls.io/en/. Audita tu instancia EC2 para encontrar configuraciones de seguridad incorrectas usando Lynis https://cisofy.com/solutions/lynis. Escanea tu instancia EC2 en busca de signos de un...

poro

poro Descripción Escanea activos accesibles públicamente en tu entorno de AWS Servicios cubiertos por esta herramienta: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro también verifica si una etiqueta que especifiques está aplicada en los recursos públicos...

metabadger

Metabadger Previene ataques SSRF en AWS EC2 mediante actualizaciones automatizadas al más seguro Servicio de Metadatos de Instancia v2 IMDSv2. Metabadger Propósito y funcionalidad Diagnosticar y evaluar tu uso actual del Servicio de Metadatos de Instancia de AWS, además de entender cómo funciona ...

CVE-2026-90460

A flaw was found in OpenStack Keystone. Tokens obtained via delegated authentication methods trusts, application credentials, OAuth1 access tokens can move a credential to an unauthorized project by supplying a new projectid in a PATCH /v3/credentials request, because only the pre-update project ...

MAL-2026-17264 Malicious code in @hrmony/kit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4084c44ab6554d66c474338de2cb482a25b31e6822d470e08b2b2ef5b1735a The package executes credential-harvesting code both from its postinstall script scripts/check-setup.mjs and from its main entry index.js, so theft...

Malicious code in @hrmony/kit-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6ac778d35433101385eb57755b6079e76c7bb3dc40306218cf5b1295d5a853 The package runs credential-harvesting code both at install time and at import time. The declared preinstall hook scripts/check-setup.mjs queries the...

MAL-2026-17258 Malicious code in @hrmony/cdk-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6601c44353f60d117ef4e1ea09f9d2c997cde4375af70c49c628b38db8f1b55a On require/import, index.js executes top-level async code that harvests AWS EC2 instance metadata via IMDSv2 including IAM role security credentials...

Malicious code in @hrmony/cdk-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6601c44353f60d117ef4e1ea09f9d2c997cde4375af70c49c628b38db8f1b55a On require/import, index.js executes top-level async code that harvests AWS EC2 instance metadata via IMDSv2 including IAM role security credentials...

MAL-2026-17256 Malicious code in @hrmony/benefit-sachbezug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de40a55476bbcc5eda275f9f385396699f1b066bf1ddedb80fad053c4057c63a The package's main entry index.js executes at require/import time and POSTs harvested data to the hardcoded endpoint...