Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...

GitGot

Description GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of...

s3crets_scanner

S3cret Scanner: Hunting For Secrets Uploaded To Public S3 Buckets S3cret Scanner tool designed to provide a complementary layer for the Amazon S3 Security Best Practices by proactively hunting secrets in public S3 buckets. Can be executed as scheduled task or On-Demand Automation workflow The...

CVE-2019-6693

CVE-2019-6693 Decrypt FortiGate configuration secrets Original advisory Vendor advisory For Fortigate VM/appliances below versions 6.2.0, 6.0.0 to 6.0.6, 5.6.10 configuration secrets are stored encrypted with a unique key. For versions above the non-default private-data-encryption parameter lets...

Damn-Vulnerable-Bank

Damn Vulnerable Bank Guide: https://rewanthtammana.com/damn-vulnerable-bank/ About application Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. All the details are documented in the guide, here. Upcoming Sessions NoNameCon...

trivy-java-db

trivy-java-db Overview trivy-java-db builds a SQLite database from maven-index repository data, storing ArtifactID, GroupID, Version and sha1 for jar files. The DB is used in Trivy to discover information about jars without GAV inside them. Update interval Every day at 00:00 Download the java...

silph

SILPH: Stealthy In-Memory Local Password Harvester SILPH is an open-source red team tool designed to dump LSA secrets, SAM hashes, and DCC2 credentials entirely in memory, without writing any files to disk. Unlike its upstream project go-secdump , SILPH is built to be integrated into the Orsted C...

envsec

envsec Secure environment secrets management using native OS credential stores. Demo Features Store secrets in your OS native credential store not plain text files Cross-platform: macOS, Linux, Windows Organize secrets by context e.g. myapp.dev, stripe-api.prod, work.staging Track secret metadata...

SharpSecDump

SharpSecDump .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py. By default runs in the context of the current user. Please only use in environments you own or have permission to test against : Usage SharpSecDump.exe -target=192.168.1.15 -u=admin...

secrets-manager-rs

secs-man secs-man is a tool for managing backups of secrets with tool-independence in mind: if you encrypt your secrets with this software, you should be able to decrypt and restore them without this software. Even if secs-man disappears from the face of the Earth, your data is still accessible...

MicroburstSecretsHunter

MicroBurst Secrets Hunter A PowerShell scanner that combs through MicroBurst Get-AzDomainInfo output for plaintext passwords, keys, connection strings, and other secrets that should never sit unencrypted in an Azure environment. Built for read-only audit workflows : you collect a domain dump with...

wrongsecrets-binaries

wrongsecrets-binaries This is a supportive repository for OWASP WrongSecrets. Here we create our binaries which are included in the official project. Want to add a challenge related to secrets hiding in binary? Open a ticket at WrongSecrets issues. Want to fix something you found in one of the...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Welcome to TruffleHog Explorer, a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to...

gimmepatz

😼 gimmePATz 😼 - Personal Access Token PAT recon tool Have you ever found a GitHub or a NPM personal access token PAT and wondered "Is this valid?" or "I wonder what a bad guy could do with this?" Well, if so, I've got the tool for you! Introducing gimmePatz, a comprehensive reconnaissance tool fo...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

SrHollow

SrHollow LSA secrets extraction, reuse a preexisting VSS shadow copy + inline regf parser + AES-256 LSA decrypt via bcrypt.dll. Chain in 6 steps 1. Enumerate\GLOBAL?? via NtOpenDirectoryObject + NtQueryDirectoryObject. Pick the highest-numbered HarddiskVolumeShadowCopyN. 2. If none exists , fall...

gha-lab-b16a4f3554

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of qgis/QGIS at commit...

kingfisher

Detect and Validate Secrets Anywhere. Map Access. Revoke Fast. Find leaked secrets. Validate what’s live. Map the blast radius. Revoke fast. Kingfisher is a blazingly fast, completely free and open source secret scanner built in Rust. It detects leaked secrets across your entire stack with hundre...

sast

sast — by Insomnia Free, fast static application security testing for your terminal & CI/CD. SAST + taint · secrets with live key validation · SCA/CVEs · IaC · CMS & web-shell/malware — one self-contained binary , the same engine in your IDE and your build. Get the editor plugins — same engine,...