Chandrapal Badshah
Chandrapal Badshah
Currently the implementation is : https://github.com/Chan9390/aws-mfa-enforce/blob/master/handler.js#L43 It checks for the `PasswordLastUsed` parameter and determines if the user has management console. But it fails in the following scenario: 1. IAM user...
### Describe the feature GuardDuty findings can be fetched as of other resources (currently `account`, `iam-user` and `ec2`) using `guard-duty` execution mode - https://cloudcustodian.io/docs/aws/resources/aws-modes.html#guard-duty GuardDuty has added support for S3,...
I executed `bindshell ` on target machine and tried to connect to it using `nc` but *the connection is refused*. I think it is a problem with the statement in...
There is no check if `/dev/tcp` is present before executing. When `over_socket` is used on Metasploit 2, an error is raised stating ``` -bash: /dev/tcp//: No such file or directory...
[AWS perimeter mod](https://hub.steampipe.io/mods/turbot/aws_perimeter) failed to detect public Lightsail instances. Looking at Steampipe AWS plugin tables showed theres no lightsail support. **References** Product page & documentation - https://aws.amazon.com/lightsail/ AWS CLI documentation...
I read the [documentation](https://community.deepfence.io/docs/secretscanner/configure/cli#configure-scans) and found that I can exclude certain paths by appending them to `exclude_paths`. Trying to evaluate this tool, I found the following false positive: ```json {...
## Bug Report ### Description I had setup Talos using talosctl on Podman (v4.7.1) rootful machine. It installed fine but when destroying the cluster using `talosctl cluster destroy` I get...
While self deploying metlo on custom VPC, the cloudformation stackset fails. The reason is `MetloSecurityGroup` is created in a VPC provided in parameters however the `MetloInstance` doesnt consider the VPC...
I have a custom CA cert installed on my system (which is mandatory to access internet mainly HTTPS sites). When I try to login keybase via commandline, I get the...
Checking the source code `pillage.go` I found the following flow: ``` EnumRegistries() --> EnumRegistry() --> EnumRepository() --> EnumImage() ``` Each stage executes asynchronously and crane gets called once when enumerating...