cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

authz0

Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...

PurpleCloud

문서 다양한 Azure 보안 랩을 생성하는 Terraform 코드 생성기. 전체 문서는 다음에서 확인하세요: https://www.purplecloud.network 변경 로그 10/18/24: Azure Sentinel 생성기 업데이트 AADDiagnostic 설정 로그 범주 업데이트 sentinel.py: NonInteractiveUserSignInLogs, ServicePrincipalSignInLogs, ManagedIdentitySignInLogs 등 LAW로 로깅 및 전송을 위한 범주를 추가했습니다. 이 Sentin...

Blinko <= 1.8.3 - User Information Leak

Blinko = 1.8.4 contains an information disclosure caused by a publicly accessible endpoint exposing user information including usernames, roles, and account creation dates, letting remote attackers access sensitive user data, exploit requires no special privileges. id: CVE-2026-23486 info: name:...

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

LearnPress < 4.3.7 - Information Disclosure

LearnPress WordPress plugin 4.3.7 contains an information disclosure vulnerability caused by missing capability checks on a REST endpoint, letting unauthenticated visitors retrieve sensitive user role and capability data via crafted requests. id: CVE-2026-8383 info: name: LearnPress 4.3.7 -...

ludus-defender-lab

Ludus Defender Lab Ludus レンジ構成と Ansible ロール。MDE および MDI 用に事前ステージングされた Windows セキュリティラボ向けで、検出カバレッジテスト用に完全に誤構成された ADCS インストールを含みます。 設定| VM| 目的 ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01| ADCS ESC1–ESC15 を使用した MDE/MDI 検出ラボ 要件 Ludus がインストールおよび設定されていること 環境変数 LUDUSAPIKEY が設定されていること VM テンプレート:...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

Corelight-Ansible-Roles

Corelight-Ansible-Roles 注意: このバージョンを実行する前に、アップグレードする場合、一部の変数名と場所が変更されています。 始めるには、次のコマンドを実行するだけです: source curl https://raw.githubusercontent.com/corelight/Corelight-Ansible-Roles/main/download-run-me-first.sh この製品には、MaxMind が作成した GeoLite2 データが含まれています。https://www.maxmind.com から入手できます。...

easysec

EasySec - 오픈소스 보안 !NOTE ¿Quieres ver esta documentación en español? Ve aquí 소개 EasySec은 중소기업SME이 자체 조직 내에서 보안 조치를 구현할 수 있도록 돕기 위해 설계된 다양한 역할, 문서 및 도구를 포함하는 저장소로, 침투 테스트 및 레드 팀red teaming 활동을 촉진합니다. 면책 조항 및 기여 이 프로젝트는 완전한 오픈소스로, Vera가 제작했으며 MIT 라이선스에 따라 배포됩니다. 모든 기여, 제안 또는 구현은 "Pull Requests" 섹션에서...

CVE-2017-12635

CVE-2017-12635 CVE-2017-12635（Apache CouchDB 1.7.0 / 2.x ）或修改（PUT /users/org.couchdb.user:）他们拥有的文档。 每个 CouchDB 用户都以文档格式存储。这些文档包含几个必填字段，CouchDB 通过这些字段处理正确的身份验证过程。我们感兴趣的是 roles 字段。 roles 字段是用户角色列表。CouchDB 不提供任何内置角色，因此您可以根据需要自由定义自己的角色。但是，您不能在其中设置系统角色，例如 admin。此外，只有管理员才能为用户分配角色——默认情况下，所有用户都没有任何角色。 验证...

cloudmapper

CloudMapper 참고 네트워크 시각화 기능명령어 prepare은 더 이상 유지 관리되지 않습니다. CloudMapper는 Amazon Web ServicesAWS 환경을 분석하는 데 도움을 줍니다. 원래 목적은 네트워크 다이어그램을 생성하여 브라우저에 표시하는 것이었습니다더 이상 유지 관리되지 않음. 이제 보안 문제 감사를 포함한 훨씬 더 많은 기능이 포함되어 있습니다. 네트워크 매핑 데모 보고서 데모 소개 게시물 네트워크에서 잘못된 구성을 발견하는 게시물 지속적 감사 수행 게시물 명령어 audit: 잠재적 잘못된 구성을...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

repokid

Repokid Repokid는 Aardvark에서 제공하는 Access Advisor를 사용하여 AWS 계정의 IAM 역할 인라인 정책에서 사용하지 않는 서비스에 대한 액세스 권한을 제거합니다. 시작하기 설치 root@kitploit: mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid pip install -e . repokid config config.json DynamoDB repokidroles라는 DynamoDB 테이블...

KubiScan

Kubernetes 클러스터에서 RBACRole-based access control 권한 부여 모델의 위험한 권한을 스캔하는 도구입니다. 이 도구는 "위험한 권한 제거로 Kubernetes 클러스터 보호" 연구의 일환으로 발표되었습니다. https://www.cyberark.com/threat-research-blog/securing-kubernetes-clusters-by-eliminating-risky-permissions/ 목차 개요 무엇을 할 수 있나요? 사용법 컨테이너 Python3로 직접 사용 전제 조건 Ubunt...

CVE-2026-73470 Apache Syncope: Delegating users can grant unowned Roles

Improper Privilege Management vulnerability in Apache Syncope. Delegations can be created or updated with Roles not owned by the delegating User, or not for the same Realm subtree under the delegation management was granted for. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, fro...

CVE-2026-73470

Apache Syncope is affected by an Improper Privilege Management vulnerability in its delegation management feature. Delegations can be created or updated with Roles not owned by the delegating User, or not for the same Realm subtree under which delegation management was granted, allowing users to ...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2026-20773

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions...