cloudsplaining

Cloudsplaining Cloudsplaining 是一个 AWS IAM 安全评估工具，用于识别违反最小权限原则的情况，并生成基于风险优先级的 HTML 报告。 示例报告 文档 完整的文档，请访问 ReadTheDocs 上的项目。 安装 速查表 示例报告 概述 Cloudsplaining 能够识别 AWS IAM 策略中违反最小权限原则的情况，并生成美观的 HTML 报告。它可以扫描您 AWS 账户中的所有策略、跨多个 AWS 账户扫描，或者扫描单个策略文件。 该工具有助于识别未使用资源约束的 IAM 操作，同时通过标记出以下无限制情况下给 AWS 账户带来风险的 IAM...

cirrusgo

CirrusGo Una herramienta rápida para escanear aplicaciones SAAS, PAAS escrita en Go Soporte de aplicaciones SAAS : salesforce contentful próxima versión Nota: el flag -o output no funciona instalación : golang 1.18Ver root@kitploit: go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or ...

aura-inspector

aura-inspector 这不是一款官方支持的 Google 产品。该项目不符合 Google 开源软件漏洞奖励计划 的参与资格。 简介 aura-inspector 是 Salesforce Experience Cloud 测试的瑞士军刀。它有助于发现配置错误的 Salesforce Experience Cloud 应用程序，并自动执行大量测试过程。更多信息，请参阅 Mandiant 博客文章：Auditing Salesforce Aura Data Exposure。 其部分功能包括： 从访客和已认证上下文中发现可访问的记录 能够使用未记录的 GraphQL Aura...

policy_sentry

Policy Sentry IAM 最小权限策略生成器。 教程 安装 包管理器 Shell 补全 步骤 1：创建模板 步骤 2：复制/粘贴 ARN 步骤 3：write-policy 命令 速查表 策略编写速查表 IAM 数据库查询速查表 本地初始化（可选） 其他用法 命令 Python 库用法 Docker Terraform 参考 文档 有关详细说明和完整文档，请访问 ReadTheDocs 上的项目。 查看 Salesforce 工程博客文章 了解 Policy Sentry。 概述 手动编写安全高效的 IAM 策略既繁琐又低效。许多基础设施即代码 IaC 开发者都有过这样的经历：...

SFPolDevChk

Comprobador de Desviaciones de Políticas de Salesforce Publicado como código abierto por NCC Group Plc - https://www.nccgroup.com/ Desarrollado por Jerome Smith @exploresecurity Con agradecimientos a Stephen Tomkinson @neonbunny9 https://www.github.com/nccgroup/SFPolDevChk Publicado bajo AGPL -...

Merlion

Merlion: Una librería de aprendizaje automático para series temporales Tabla de contenidos 1. Introducción 2. Comparación con librerías relacionadas 3. Instalación 4. Documentación 5. Primeros pasos 1. Detección de anomalías 2. Pronóstico 6. Evaluación y benchmarking 7. Informe técnico y cómo cit...

CVE-2026-49099

CVE-2026-49099 — Inyección de cabecera sObjectQuery en camel-salesforce Reproductores de prueba de concepto ejecutables para la misma vulnerabilidad de Apache Camel, uno por runtime:...

poc_salesforce_lightning

PoC para Salesforce lightning Solo con fines académicos. Esta herramienta vuelca los datos de objetos de Salesforce a través del endpoint Aura lightning con el privilegio de invitado. Perdona por el código desordenado. Requisitos Python3 Uso root@kitploit: $ python3 exploit.py -h usage: exploit.p...

vulnreport

已废弃项目 本项目目前不再维护，已被废弃。 Vulnreport 渗透测试管理与自动化平台 Vulnreport 是一个用于管理渗透测试并生成格式良好、可操作的漏洞报告的平台，省去了通常占用安全工程师时间的额外工作。该平台旨在支持流程每个阶段的自动化，并允许针对你渗透测试流程中使用的其他系统进行自定义。 Vulnreport 由 Salesforce 产品安全团队构建，旨在消除我们花在编写、格式化和校订渗透测试报告上的时间。我们的目标（并将继续是）构建出色的安全工具，让渗透测试人员和安全工程师能够专注于发现和修复漏洞。 部署 Vulnreport 是一个 Ruby Web...

raccoon

Raccoon: auditor de acceso a objetos de Salesforce Publicado como código abierto por NCC Group Plc - https://www.nccgroup.com/ Desarrollado por Jerome Smith @exploresecurity con agradecimientos a Viktor Gazdag @wucpi https://www.github.com/nccgroup/raccoon Publicado bajo AGPL - consulte LICENSE...

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, which Reco has named the City Forum campaign after ...

WordPress Object Sync for Salesforce plugin <= 2.2.13 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by nthng in WordPress Plugin Object Sync for Salesforce versions = 2.2.13...

CVE-2026-15162

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpressobjecttype parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback canprocess checks only the HTTP method for the push class — no capability or nonc...

CVE-2026-15162

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpressobjecttype parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback canprocess checks only the HTTP method for the push class — no capability or nonc...

CVE-2026-15162

The CVE-2026-15162 entry concerns the Object Sync for Salesforce WordPress plugin, where an unauthenticated SQL injection is possible via the wordpress_object_type parameter in the /wp-json/object-sync-for-salesforce/push/ REST route. The can_process() check only validates the HTTP method, not ca...

CVE-2026-15162 Object Sync for Salesforce <= 2.2.13 - Unauthenticated SQL Injection

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpressobjecttype parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback canprocess checks only the HTTP method for the push class — no capability or nonc...

EUVD-2026-58838

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpressobjecttype parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback canprocess checks only the HTTP method for the push class — no capability or nonc...

PT-2026-72143

Name of the Vulnerable Software and Affected Versions Object Sync for Salesforce versions prior to 2.2.14 Description An unauthenticated SQL Injection exists in the /wp-json/object-sync-for-salesforce/push/ REST endpoint. The issue occurs because the can process permission callback only verifies...

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of them, covering cloud services, AI tools, malware, data breaches, scams, and new attack methods. The latest ThreatsDay Bulletin puts all of these short updates ...

Improper Input Validation

Apache Camel Salesforce is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of Salesforce control headers, where attacker-controlled HTTP headers can override configured SOQL queries, SObject parameters, or Apex REST requests, allowing unauthorized acce...