26 matches found
goGetBucket
goGetBucket - AWS S3 Bucket discovery through alterations and permutations Warning: code is horrible as I have only used this for personal use. When I get the time I will make it less-horrible and faster. When performing a recon on a domain - understanding assets they own is very important. AWS S...
bucket-stream
🚨 Bucket Stream ya no recibe mantenimiento. Si necesitas soporte o consultoría para tus esfuerzos de red team, envíame un correo a [email protected] 🚨 Bucket Stream Encuentra buckets interesantes de Amazon S3 observando los registros de transparencia de certificados. Esta herramienta...
sandcastle
Inspirado por una conversación con @nickelser de Instacart en HackerOne, he optimizado y publicado Sandcastle – un script de Python para la enumeración de buckets S3 de AWS, anteriormente conocido como bucketCrawler. El script toma el nombre de un objetivo como argumento base por ejemplo, shopify...
GCPBucketBrute
GCPBucketBrute A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script optionally accepts GCP user/service account credentials and a keyword. Then, a list of permutations will be generated from that keywor...
altdns
Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...
dnstwist
See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...
cook
COOK Un generatore di wordlist, divisore, unificatore, cercatore, salvatore, creatore di permutazioni e combinazioni di parole, applicatore di diverse codifiche/decodifiche e tutto ciò di cui hai bisogno. L'assassino della frustrazione! & Personalizzabile! Indice Installazione Configurazione Base...
Vulnerabilities in Partial TEE-Shielded LLM Inference with Precomputed Noise
The deployment of large language models LLMs on third-party devices requires new ways to protect model intellectual property. While Trusted Execution Environments TEEs offer a promising solution, their performance limits can lead to a critical compromise: using a precomputed, static secret basis ...
LINEture: Novel Signature Cryptosystem
We propose a novel digital signature cryptosystem that exploits the concept of the brute-force problem. To ensure the security of the cryptosystem, we employed several mechanisms: sharing a common secret for factorable permutations, associating permutations with the message being signed, and...
Shuffling Cards When You Are of Very Little Brain: Low Memory Generation of Permutations
How can we generate a permutation of the numbers $1$ through $n$ so that it is hard to guess the next element given the history so far? The twist is that the generator of the permutation the "Dealer" has limited memory, while the "Guesser" has unlimited memory. With unbounded memory actually $n$...
Non-Adaptive Cryptanalytic Time-Space Lower Bounds Via a Shearer-Like Inequality for Permutations
Whitepaper called Non-Adaptive Cryptanalytic Time-Space Lower Bounds Via A Shearer-Like Inequality For Permutations...
[SECURITY] Fedora 39 Update: rust-uu_shuf-0.0.23-3.fc39
shuf uutils display random permutations of input lines...
[SECURITY] Fedora 40 Update: rust-uu_shuf-0.0.23-3.fc40
shuf uutils display random permutations of input lines...
quarkus: HTTP security policy bypass
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...
quarkus: HTTP security policy bypass
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...
quarkus: HTTP security policy bypass
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...
GHSA-4F4R-WGV2-JJVG Quarkus HTTP vulnerable to incorrect evaluation of permissions
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...
CVE-2023-4853 Quarkus: http security policy bypass
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...
CVE-2023-4853 Quarkus: http security policy bypass
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...
quarkus: HTTP security policy bypass
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...