疑似Oday
Detects a publicly accessible HashiCorp Vault API instance that is unsealed and responding without authentication. This critical misconfiguration can expose sensitive secrets and enable privilege escalation or lateral movement.
id: vault-unsealed-unauth
info:
name: HashiCorp Vault API - Exposure
author: Hamza Sahin
seve
...