trufflehogを活用ã—ãŸGitHub Organizationã®credentialsスã‚ャン - 10X Product Blog
ã“ã‚“ã«ã¡ã¯ã€ã‚»ã‚ュリティãƒãƒ¼ãƒ ã®@sota1235ã§ã™ã€‚ çªç„¶ã§ã™ãŒã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®çš†ã•ã‚“ã«è³ªå•ã§ã™ã€‚他者ã«æ¼ã‚‰ã—ã¦ã¯ã„ã‘ãªã„API keyã‚„SSHã®private keyを誤ã£ã¦GitHubã«pushã—ã¦ã—ã¾ã£ãŸã“ã¨ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿç§ã¯ã‚ã‚Šã¾ã™ã€‚*1 日々ã€ã‚¹ãƒ”ード感をæŒã£ã¦ã‚‚ã®ã¥ãã‚Šã«è‡¨ã‚“ã§ã„ãä¸ã§æœ¬å½“ã¯commitã—ã¦ã¯ã„ã‘ãªã„ã‚‚ã®ã‚’é–“é•ã£ã¦commitã—ãŸã‚Šã€ãã‚Œã«æ°—ã¥ã‹ãšã«GitHubã«pushã—ã¦ã—ã¾ã†ãªã‚“ã¦ã“ã¨ã¯äººé–“ãŒãƒŸã‚¹ã‚’ã™ã‚‹ç”Ÿã物ã§ã‚る以上ã€èª°ã«ã§ã‚‚èµ·ããˆã‚‹äº‹æ•…ã§ã™ã€‚ 今回ã¯ãã‚“ãªäº‹æ•…を検知ã™ã‚‹ã®ã«trufflehogを活用ã—ã¦ã„ã‚‹ãŠè©±ã‚’ã—ã¾ã™ã€‚ ãªãŠä»Šå›žã¯äº‹æ•…を未然ã«äºˆé˜²ã™ã‚‹è©±ã«ã¯è§¦ã‚Œã¾ã›ã‚“。 github.com credentialsを誤ã£ã¦GitHubã«pushã™ã‚‹ã“ã¨ã®ãƒªã‚¹ã‚¯ credentialsã¨ã¯ credentialsã®ã‚ã‚‹ã¹ã管ç†æ–¹æ³• GitH
GitHub - royhills/ike-scan: The IKE Scanner
ike-scan uses the standard GNU autoconf and automake tools, so installation is the normal process: Run git clone https://github.com/royhills/ike-scan.git to obtain the project source code Run cd ike-scan to enter source directory Run autoreconf --install to generate a viable ./configure file Run ./configure or ./configure --with-openssl to use the OpenSSL libraries Run make to build the project Ru
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - adysec/nuclei_poc: Nuclei POC，æ¯æ—¥æ›´æ–° | 自动整åˆå…¨ç½‘Nucleiçš„æ¼æ´žPOC，实时åŒæ¥æ›´æ–°æœ€æ–°POC，ä¿å˜å·²è¢«åˆ 除的POC。通过批é‡å…‹éš†Github项目，获å–Nuclei POC，并将POC按类别分类å˜æ”¾ï¼Œä½¿ç”¨Github Action实现（已有11wPOCï¼Œå·²æ ¡éªŒæœ‰æ•ˆæ€§å¹¶åŽ»é‡ï¼‰
GitHub - alec-stuart/BreakingBricks: Some tools used in the Ruxcon / Kiwicon /SECT-T presentation "Breaking Bricks and Plumbing Pipes: Cisco ASA a Super Mario Adventure."
GitHub - cyberaz0r/badmoodle: Moodle community-based vulnerability scanner
GitHub - inc0d3/moodlescan: Tool for scan vulnerabilities in Moodle platforms
GitHub - jorhelp/Ingram: 网络摄åƒå¤´æ¼æ´žæ‰«æ工具 | Webcam vulnerability scanning tool
GitHub - ANG13T/netspionage: Network Forensics CLI utility that performs Network Scanning, OSINT, and Attack Detection
GitHub - qianxiao996/Super-PortScan: 端å£æ‰«æ工具
GitHub - AlaBouali/bane: The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic
GitHub - laysakura/PEN200-OSCP-DynamicCheatSheat: A dynamic cheat sheet for PEN-200, OSCP, and other pentests made with Google Sheets
Welcome to Hacking Life! - Hacking Life
Master Penetration Testing with Masscan: Scan the Internet in Minutes | Infosec
Port scanning and banner grabbing with Python - Johannes Kinzigs Blog
Kali Linux / Packages / unicornscan · GitLab
GitHub - CiscoCXSecurity/udp-proto-scanner: udp-proto-scanner is a Perl script which discovers UDP services by sending triggers to a list of hosts
GitHub - nullt3r/udpx: Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Window
GitHub - bitquark/shortscan: An IIS short filename enumeration tool
GitHub - wapiti-scanner/wapiti: Web vulnerability scanner written in Python3
Port Scan | Exploit Notes
{{#tags}}- {{label}}
{{/tags}}