Lucene search
+L

1492 matches found

Kitploit
Kitploit
•added 2026/09/28 8:44 p.m.•20 views

SecretsStalker

secretstalker root@kitploit: / / / / / / / / / / / \ / - / - -/ / \ \ / / // / '/ - / ////// / // /,////\// ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/09/28 8:17 p.m.•4 views

CVE-2026-101914

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...

6.5CVSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/28 7:43 p.m.•3 views

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

Impact When using RBAC to apply authentication rules, the exact path method name matcher applies a prefix match instead of an exact match for case-insensitive matches. As a result, if a service has a method with a name that is a prefix of the name of a different method, and they have different...

6.5CVSS5.9AI score
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2026/09/28 7:36 p.m.•6 views

CVE-2026-101914 @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...

6.5CVSS
SaveExploits0References6
CVE
CVE
•added 2026/09/28 7:36 p.m.•5 views

CVE-2026-101914

The @grpc/grpc-js library (versions prior to 1.13.1 and 1.14.1 ) contains an authorization flaw where the exact path matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. This allows a request for a longer service method nam...

6.5CVSS5.8AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/28 5:18 p.m.•35 views

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/28 4:45 p.m.•14 views

azure-security-auditor

Azure Security Posture Auditor A lightweight, production-style CLI tool that audits Azure security configurations and surfaces common misconfigurations — mirroring what Microsoft Defender for Cloud checks internally. Checks...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 4:40 p.m.•22 views

teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...

6.1AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/09/28 3:54 p.m.•15 views

rakkess

rakkess Revisar Acceso - plugin de kubectl para mostrar una matriz de acceso para recursos del servidor Introducción ¿Alguna vez te has preguntado qué derechos de acceso tienes en un clúster de Kubernetes proporcionado? Para recursos individuales puedes usar kubectl auth can-i list deployments,...

6AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/28 3:15 p.m.•23 views

k8scout

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path — from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You ha...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 6:25 a.m.•142 views

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

5.5AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/28 6:23 a.m.•21 views

KubiScan

A tool for scanning Kubernetes cluster for risky permissions in Kubernetes's Role-based access control RBAC authorization model. The tool was published as part of the "Securing Kubernetes Clusters by Eliminating Risky Permissions" research...

6.3AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/28 6:12 a.m.•10 views

rbac

PHP-RBAC v2.x PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Hierarchical Role Based Access Control and more, in the fastest implementation yet. Current Stable Release: PHP-RBAC v2.0 Connect With Us Home Page: http://phprbac.net/ OWASP Project Page:...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 5:57 a.m.•11 views

the-bastion

🔒 The Bastion Resumen Los bastiones son un clúster de máquinas utilizadas como punto de entrada único por los equipos operativos como administradores de sistemas, desarrolladores, administradores de bases de datos, ... para conectarse de forma segura a dispositivos servidores, máquinas virtuales,...

5.9AI score
SaveExploits0References18
Kitploit
Kitploit
•added 2026/09/28 2:50 a.m.•8 views

jackhammer

Jackhammer: Una herramienta de evaluación/gestión de vulnerabilidades de seguridad para resolver todos los problemas del equipo de seguridad. ¿Qué es Jackhammer? Jackhammer es una herramienta de colaboración construida con el objetivo de cerrar la brecha entre el equipo de seguridad vs el equipo ...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 2:50 a.m.•92 views

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 1:26 a.m.•22 views

casbin

Apache Casbin News : still worry about how to write the correct Apache Casbin policy? Apache Casbin online editor is coming to help! Try it at: https://casbin.apache.org/editor/ Apache Casbin is a powerful and efficient open-source access control library for Golang projects. It provides support f...

6.2AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/09/27 10:44 p.m.•9 views

red-kube

Emulación de adversario K8S para Red Team basada en kubectl Red Kube es una colección de comandos de kubectl diseñados para evaluar la postura de seguridad de los clústeres de Kubernetes desde la perspectiva del atacante. Los comandos son pasivos para recopilación de datos y divulgación de...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/27 10:33 p.m.•16 views

EscalateGPT

Introducción Herramienta de Identificación de Escalada de Privilegios IAM Características 🛠️ Identifica posibles problemas de escalada de privilegios en políticas de AWS IAM y Azure RBAC 💻 Utiliza los modelos de IA más avanzados a través de OpenAI para el análisis 👍 Devuelve rutas de escalada y...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 4:23 p.m.•11 views

permission-manager

Gestor de permisos ¡Bienvenido al Permission Manager! 🎉 🎉 Permission Manager es una aplicación desarrollada por SIGHUP que permite una gestión RBAC para Kubernetes súper fácil e intuitiva. Si buscas una forma sencilla e intuitiva de gestionar tus usuarios dentro de un clúster de Kubernetes, este ...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder