ludus-defender-lab

Ludus Defender Lab Ludus-Range-Konfiguration und Ansible-Rollen für ein Windows-Sicherheitslabor, das für MDE und MDI vorbereitet ist, mit einer vollständig fehlkonfigurierten ADCS-Installation zum Testen der Erkennungsabdeckung. Konfiguration| VMs| Zweck ---|---|--- zsec-mde-mdi-lab.yml| DC01 +...

PurpleCloud

Documentazione Generatore di codice Terraform per creare diversi laboratori di sicurezza Azure. Per la documentazione completa visita: https://www.purplecloud.network Registro delle modifiche 10/18/24: Aggiornato il generatore Azure Sentinel Categorie di log delle impostazioni di diagnostica AAD...

linux

.. include:: ../disclaimer-ita.rst :Original: :ref:Documentation/admin-guide/README.rst .. itreadme: Rilascio del kernel Linux 6.x http://kernel.org/ .. warning:: root@kitploit: TODO ancora da tradurre...

cloudmapper

CloudMapper Nota la funzionalità Network Visualization comando prepare non è più mantenuta. CloudMapper ti aiuta ad analizzare i tuoi ambienti Amazon Web Services AWS. Lo scopo originale era generare diagrammi di rete e mostrarli nel tuo browser funzionalità non più mantenuta. Ora contiene molte...

Corelight-Ansible-Roles

Corelight-Ansible-Roles Attenzione: Prima di eseguire questa versione, se stai effettuando un aggiornamento, alcuni nomi di variabili e posizioni sono cambiati Per iniziare, esegui semplicemente questo comando: source curl...

easysec

EasySec - Open source !NOTE ¿Quieres ver esta documentación en español? Ve aquí Introduzione EasySec è un repository che include una varietà di ruoli, documentazione e strumenti progettati per aiutare le piccole e medie imprese PMI a implementare misure di sicurezza all'interno delle proprie...

CVE-2017-12635

CVE-2017-12635 Fallstudie und PoC von CVE-2017-12635 Apache CouchDB 1.7.0 / 2.x 2.1.1 - Remote Privilege Escalation Präsentation CouchDB Apache CouchDB ist eine dokumentenorientierte NoSQL-Datenbank, implementiert in Erlang. CouchDB verwendet mehrere Formate und Protokolle, um seine Daten zu...

KubiScan

Uno strumento per scansionare i cluster Kubernetes alla ricerca di autorizzazioni rischiose nel modello di controllo degli accessi basato sui ruoli RBAC di Kubernetes. Lo strumento è stato pubblicato come parte della ricerca "Securing Kubernetes Clusters by Eliminating Risky Permissions"...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit users documents with duplicate keysfor 'roles' used for access control within the database, including the special case 'admin' role, th...

Blinko <= 1.8.3 - User Information Leak

Blinko = 1.8.4 contains an information disclosure caused by a publicly accessible endpoint exposing user information including usernames, roles, and account creation dates, letting remote attackers access sensitive user data, exploit requires no special privileges. id: CVE-2026-23486 info: name:...

LearnPress < 4.3.7 - Information Disclosure

LearnPress WordPress plugin 4.3.7 contains an information disclosure vulnerability caused by missing capability checks on a REST endpoint, letting unauthenticated visitors retrieve sensitive user role and capability data via crafted requests. id: CVE-2026-8383 info: name: LearnPress 4.3.7 -...

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

repokid

Repokid O Repokid usa o Access Advisor fornecido pelo Aardvark para remover permissões que concedem acesso a serviços não utilizados das políticas inline de funções IAM em uma conta AWS. Primeiros Passos Instalação...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

authz0

Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...

infosec-interview-questions

Fragen für Vorstellungsgespräche im Bereich Informationssicherheit Eine Sammlung von Interviewfragen für Rollen in der Informationssicherheit Inhaltsverzeichnis Anwendungssicherheit Architekt Blue Team Verschlüsselung Forensik Allgemein Incidence Response Netzwerke Red Team Schwachstellenmanageme...