zap-scripts

zap-scripts Scripts de Zed Attack Proxy para encontrar CVEs y Secretos. Construcción Este proyecto usa Gradle para construir el add-on de ZAP, simplemente ejecute: root@kitploit: ./gradlew build en el directorio principal del proyecto, el add-on se colocará en el directorio build/zapAddOn/bin/. U...

deepsecrets

DeepSecrets - una mejor herramienta para el escaneo de secretos !WARNING El desarrollo activo se trasladó al fork del creador en https://github.com/ntoskernel/deepsecrets. Este repositorio no recibirá más actualizaciones...

actions-secrets

GitHub Action di analisi dei segreti di SecureStack Una GitHub Action che analizza il tuo codice sorgente alla ricerca di segreti, credenziali, chiavi API, hostname/URL di server e database, e molto altro! Quando aggiungi questo alle GitHub Actions analizzeremo il tuo codice sorgente per...

EUVD-2024-2481

Malicious code in bioql PyPI...

CVE-2024-43379

CVE-2024-43379 concerns TruffleHog, a secrets-scanning tool. According to the connected documents, the issue is a Blind SSRF vulnerability in some detectors prior to version 3.81.9 . The attack requires an attacker-crafted input that, when scanned, could cause an unauthenticated GET endpoint that...

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

At the heart of every application are secrets. Credentials that allow human-to-machine and machine-to-machine communication. Machine identities outnumber human identities by a factor of 45-to-1 and represent the majority of secrets we need to worry about. According to CyberArk's recent research,...