trufflehogを活用ã—ãŸGitHub Organizationã®credentialsスã‚ャン - 10X Product Blogã“ã‚“ã«ã¡ã¯ã€ã‚»ã‚ュリティãƒãƒ¼ãƒ ã®@sota1235ã§ã™ã€‚ çªç„¶ã§ã™ãŒã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®çš†ã•ã‚“ã«è³ªå•ã§ã™ã€‚他者ã«æ¼ã‚‰ã—ã¦ã¯ã„ã‘ãªã„API keyã‚„SSHã®private keyを誤ã£ã¦GitHubã«pushã—ã¦ã—ã¾ã£ãŸã“ã¨ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿç§ã¯ã‚ã‚Šã¾ã™ã€‚*1 日々ã€ã‚¹ãƒ”ード感をæŒã£ã¦ã‚‚ã®ã¥ãã‚Šã«è‡¨ã‚“ã§ã„ãä¸ã§æœ¬å½“ã¯commitã—ã¦ã¯ã„ã‘ãªã„ã‚‚ã®ã‚’é–“é•ã£ã¦commitã—ãŸã‚Šã€ãã‚Œã«æ°—ã¥ã‹ãšã«GitHubã«pushã—ã¦ã—ã¾ã†ãªã‚“ã¦ã“ã¨ã¯äººé–“ãŒãƒŸã‚¹ã‚’ã™ã‚‹ç”Ÿã物ã§ã‚る以上ã€èª°ã«ã§ã‚‚èµ·ããˆã‚‹äº‹æ•…ã§ã™ã€‚ 今回ã¯ãã‚“ãªäº‹æ•…を検知ã™ã‚‹ã®ã«trufflehogを活用ã—ã¦ã„ã‚‹ãŠè©±ã‚’ã—ã¾ã™ã€‚ ãªãŠä»Šå›žã¯äº‹æ•…を未然ã«äºˆé˜²ã™ã‚‹è©±ã«ã¯è§¦ã‚Œã¾ã›ã‚“。 github.com credentialsを誤ã£ã¦GitHubã«pushã™ã‚‹ã“ã¨ã®ãƒªã‚¹ã‚¯ credentialsã¨ã¯ credentialsã®ã‚ã‚‹ã¹ã管ç†æ–¹æ³• GitH
GitHub - jeromer/libxid: A rust port of the Golang xid library (https://github.com/rs/xid)
実用Rustアプリケーション開発
GitHub - rustls/rustls: A modern TLS library in Rust
GitHub - rcoh/angle-grinder: Slice and dice logs on the command line
GitHub - say4n/jf: flatten them json
GitHub - shellgei/rusty_bash: bash written with Rust
GitHub - greymd/teip: Masking tape to help commands "do one thing well"
GitHub - ynqa/jnv: Interactive JSON filter using jq
GitHub - astral-sh/ruff: An extremely fast Python linter and code formatter, written in Rust.
Rocket: A Web Framework for Rust
GitHub - svenstaro/dummyhttp: Super simple HTTP server that replies a fixed body with a fixed response code
GitHub - YS-L/csvlens: Command line csv viewer
Rust on Nails
GitHub - ivre/masscanned: Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
GitHub - Esc4iCEscEsc/skanuvaty: Dangerously fast DNS/network/port scanner
Rust入門
GitHub - ogham/dog: A command-line DNS client.
GitHub - cloudflare/odoh-client-rs: Oblivious DoH client application written in Rust
CodeSandbox: Instant Cloud Development Environments
{{#tags}}- {{label}}
{{/tags}}