bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

CVE-2021-43798

CVE-2021-43798 by Privacy Hunter प्रभावित संस्करण: Grafana 8.0.0-beta1 से 8.3.0 तक पैच किए गए संस्करणों को छोड़कर कमजोरी का प्रकार: Directory Traversal निर्देशिका में भ्रमण प्रभाव स्तर: अत्यंत खतरनाक Critical प्लेटफ़ॉर्म: Grafana ओपन-सोर्स मॉनिटरिंग और ऑब्ज़र्वेबिलिटी प्लेटफ़ॉर्म ⚠️ कमजोरी का विवर...

BucketLoot

BucketLoot 一款自动化 S3 兼容 Bucket 检查工具 描述 • 安装 • 功能 • 文档 • 致谢 描述 BucketLoot 是一款自动化 S3 兼容 Bucket 检查工具，能够帮助用户从公开暴露的存储桶中提取资产、标记机密泄露，甚至搜索自定义关键词和正则表达式，通过扫描以纯文本形式存储数据的文件来实现。 该工具可以扫描部署在 Amazon Web Services AWS、Google Cloud Storage GCS、DigitalOcean Spaces 以及可能连接到这些平台的自定义域名/URL 上的存储桶。它会以 JSON...

CVE-2021-21239

Technischer Bericht zu CVE-2021-21239: SAML-Authentifizierungsschwachstelle in Redash Einführung in SAML Security Assertion Markup Language SAML ist ein offener Standard für den Austausch von Authentifizierungs- und Autorisierungsdaten zwischen Parteien in einem föderierten Identitätssystem. Er...

CVE-2019-9053

CVE-2019-9053 --- Python3 Originale Exploit-Quelle: https://www.exploit-db.com/exploits/46635 POC-Video -- https://attackdefense.com/challengedetailsnoauth?cid=1326 attackdefense...

badkeys

badkeys Werkzeug und Bibliothek zum Überprüfen von kryptografischen öffentlichen Schlüsseln auf bekannte Schwachstellen was? badkeys überprüft öffentliche Schlüssel in verschiedenen Formaten auf bekannte Schwachstellen. Eine Webversion ist unter badkeys.info verfügbar. Installation badkeys kann v...

s3tk

s3tk Un toolkit di sicurezza per Amazon S3 🍊 Testato sul campo presso Instacart Installazione Esegui: root@kitploit: pip install s3tk Puoi usare AWS CLI o AWS Vault per configurare le tue credenziali AWS: root@kitploit: pip install awscli aws configure Vedi le politiche IAM necessarie per ogni...

machinae

Collettore di Intelligence per la Sicurezza Machinae Machinae è uno strumento per raccogliere intelligence da siti/feed pubblici riguardanti vari dati legati alla sicurezza: indirizzi IP, nomi di dominio, URL, indirizzi email, hash di file e impronte SSL. È stato ispirato da Automater, un altro...

s3-leaks

s3-leaks Liste der AWS-S3-Lecks Wenn dir weitere Lecks bekannt sind, sende gerne einen PR...

GitMiner

⚠️ Repository veraltet – Projekt ersetzt Dieses Repository wird nicht mehr gewartet und ist offiziell veraltet. Das Projekt wird aktiv weiterentwickelt unter: https://github.com/unkl4b/Gitminer3 Bitte migrieren Sie zu GitMiner3 , um die neuesten Updates, Verbesserungen und aktiven Support zu...

cloud_enum

cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...

HijackLibs

HijackLibs Questo progetto mira a mantenere un registro delle opportunità di DLL Hijacking divulgate pubblicamente. Puoi trovare la versione web di questo repository su https://www.hijacklibs.net. Licenza : GPLv3.0 Codice di condotta : Contributor Covenant Guida ai contributi Schema YAML usato da...

nzyme

Nzyme Scopri di più su https://www.nzyme.org/. La versione 2.0.0 di Nzyme è attualmente in fase di sviluppo e sono disponibili release alpha. Contribuisci Ci sono molti modi per contribuire e ogni interazione con la community è assolutamente benvenuta: Apri un ticket per qualsiasi tipo di bug che...

pwnedOrNot

Strumento OSINT per Trovare Password di Account Email Compromessi Creato da Lohitya Pushkar thewhiteh4t. Twitter - Blog Disponibile| in| ---|---|--- BlackArch Linux| SecBSD| Tsurugi Linux | | pwnedOrNot funziona in due fasi. Nella prima fase testa l'indirizzo email fornito utilizzando la...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

CVE-2018-10467

CVE-2018-10467 समयरेखा 2018-04-06: खोजा गया 2018-04-13: परीक्षण वातावरण पर पुनः परीक्षण 2018-04-16: आंतरिक संचार 2018-04-27: विक्रेता को सूचना 2018-04-27: विक्रेता की प्रतिक्रिया 2018-05-27: उत्पाद की तकनीकी स्पष्टीकरण 2018-05-03: विक्रेता से समस्या को ठीक करने के निर्देश जोड़े गए 2018-05-04:...

AzureADEnumeration

Microsoft Entra ID Azure AD Unauthentifizierte Enumeration Quelle: EvilMist Toolkit - Invoke-EntraEnum.ps1 - https://github.com/Logisek/EvilMist 1. Tenant-Erkennung -TenantInfo Ermittelt Tenant-Informationen mithilfe öffentlicher APIs. 1.1 azmap.dev-API Ruft Mandantendetails vom azmap.dev-Dienst...

CVE-2026-44476 Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

CVE-2026-44476 Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

CVE-2026-79804

A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is some unknown functionality of the file /search.php. Performing a manipulation of the argument searchbox results in sql injection. Remote exploitation of the...