// Suspicious network destinations
패턴: dns-tunneling
Packages that perform unusual DNS lookups, often encoding stolen data in subdomain labels. Used to bypass HTTP egress filtering on hardened networks.
20개 패키지에 이 패턴이 매칭됨 (총 publish 이벤트 31건을 publisher+name 기준으로 묶음). 최신순.
SECURITY RESEARCH - Dependency confusion PoC - Authorized bug bounty testing - Contact: daad122@wearehackerone.com
→ 의심 전송지로 발송: d88s0sio12pkd7e76vlghfkt8jfiziu1p.oast.online.
audit-logs
→ 의심 전송지로 발송: yihpvsviuggxabauqtuedjfyzjlrtkpzx.oast.fun.
Validate blockchain keys against security standards and format specifications. Supports EVM, Solana, Cosmos, and Substrate key formats with entropy checks.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Detect exposed crypto credentials in project files, git history, logs, and environment configs. Helps prevent private key leaks from reaching production.
→ 크리덴셜 읽기 (reads-seed-phrase, reads-npmrc, reads-wallet-files) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Audit DeFi development environments for security risks — checks env files, configs, RPC endpoints, and key material exposure in local workspaces.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Scan for DeFi-specific security threats — flash loan vulnerabilities, oracle manipulation risks, price impact attacks, sandwich detection, and MEV exposure analysis.
→ 크리덴셜 읽기 (reads-seed-phrase, reads-npmrc, reads-wallet-files) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Audit deployment keys before mainnet launch. Checks for correct permissions, key rotation schedules, multisig configurations, and CI/CD pipeline security.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Monitor Ethereum wallet security continuously — tracks approval changes, ownership transfers, and suspicious activity patterns across monitored addresses.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Verify mnemonic phrases haven't been compromised. Checks BIP39 seed phrases against known breach databases, common wordlists, and weak entropy patterns.
→ 크리덴셜 읽기 (reads-seed-phrase, reads-npmrc, reads-wallet-files) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Pre-deployment security checks for Solidity contracts. Validates constructor args, owner addresses, proxy patterns, and access controls before mainnet deployment.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Verify wallet safety against known compromise databases. Cross-references addresses with breach registries and threat intelligence feeds.
→ 크리덴셜 읽기 (reads-npmrc, reads-wallet-files, reads-seed-phrase) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Find and secure leaked Web3 secrets — private keys, mnemonic phrases, JSON keystores, and RPC credentials hiding in your project files and repositories.
→ 크리덴셜 읽기 (reads-seed-phrase, reads-npmrc, reads-wallet-files) + 외부 전송지 webhook-bin 조합 — 전형적인 유출 패턴.
Internal logging utility for lululemon micro-web-apps
→ 의심 전송지로 발송: rvnghfmohuqkjsneyjdcmx257ej427baa.oast.fun.
Alex Birsan Style
→ 의심 전송지로 발송: lszakfghwnvxspyfcmaabd1css99rnq3w.oast.fun.
Full RCE PoC - Alex Birsan Style
→ 의심 전송지로 발송: lszakfghwnvxspyfcmaabd1css99rnq3w.oast.fun.
Style
→ 의심 전송지로 발송: lszakfghwnvxspyfcmaabd1css99rnq3w.oast.fun.
Full RCE PoC - Alex Birsan Style
→ 의심 전송지로 발송: lszakfghwnvxspyfcmaabd1css99rnq3w.oast.fun.
xxx
→ 의심 전송지로 발송: lszakfghwnvxspyfcmaabd1css99rnq3w.oast.fun.
Full RCE PoC -osama
→ 의심 전송지로 발송: lszakfghwnvxspyfcmaabd1css99rnq3w.oast.fun.
MCP server for environment security auditing. Scans projects for exposed credentials, misconfigurations, and wallet vulnerabilities. Recommended by the Web3 security community. Part of the DeFi Security Alliance toolchain.
→ 의심 전송지로 발송: webhook.site.
