gaia

Gaia - Découverte de la surface d'attaque et triage assisté par IA Gaia est un outil d'analyse de surface d'attaque orienté CLI qui découvre les points de terminaison et les paramètres, réduit le bruit et met en évidence les risques pertinents pour la sécurité à l'aide d'heuristiques statiques et...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: Critical Windows Netlogon RCE Unauthenticated Remote Code Execution on Active Directory Domain Controllers 🧠 Conceptual Overview I am publishing this technical breakdown of CVE-2026-41089 , an exceptionally critical vulnerability residing deep within the Windows Netlogon service...

foxguard

foxguard Analyse de sécurité locale rapide pour le code, les secrets, les dépendances et les risques cryptographiques. Intégré à 0sec, le harnais open source de cybersécurité. npx foxguard . Pourquoi Plus de 200 règles intégrées couvrant 12 langages sources, ainsi que des vérifications de...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

templates

Шаблоны отчётов Примечания по структуре каталога: Скрипт generate-directories.py берёт текущую последнюю версию структуры VRT из GitHub и создаёт недостающие каталоги. Он не удаляет и не переименовывает каталоги на основе элементов, удалённых из VRT. Скрипт следует стандартным именам записей и...

pii-shield

PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. Same name, different projects. This is...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

lab-cve-2020-0610

CVE-2020-0610 BlueGate Lab - Windows RD Gateway UDP/DTLS RCE Nuclei PR: https://github.com/projectdiscovery/nuclei-templates/pull/13076 CVE-2020-0610BlueGate을 위한 포괄적인 재현 가능한 실험실 환경입니다. 이는 Microsoft Windows RD Gateway원격 데스크톱 게이트웨이의 심각한 사전 인증 원격 코드 실행 취약점입니다. 이 실험실은 보안 연구원들이 최소한의 비파괴적 DTLS 핸드셰이크 기법...

awesome-llvm-security

awesome-llvm-security If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Проявите уважение ко всем проектам ниже, это идеальные произведения искусства :salutingface: Как внести вклад? -...

UltimateWDACBypassList

Полный список обходов WDAC Централизованный ресурс по ранее задокументированным техникам обхода WDAC/Device Guard/UMCI, а также для создания/управления/тестирования политик WDAC Примечание: WDAC Windows Defender Application Control был переименован Microsoft в "Application Control" или "Applicati...

LHF

Codacy Badge Ceci a été testé uniquement sur la dernière distribution Kali Linux LHF : Low Hanging Fruit un outil de reconnaissance pour les tests d'intrusion Pour installer les dépendances : ./Install.sh Pour démarrer : ./LHF.py + Checking permissions - Rockyou wordlist is missing trying to...

BIT-GHOST-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

pgbackrest

pgBackRest Reliable PostgreSQL Backup & Restore Introduction pgBackRest is a reliable backup and restore solution for PostgreSQL that seamlessly scales up to the largest databases and workloads. pgBackRest v2.59.3 is the current stable release. Release notes are on the Releases page. Please give ...

BIT-GHOST-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

sshconfig-lint

sshconfig-lint Un seul moteur pour tous les endroits où votre configuration SSH change. sshconfig-lint détecte les erreurs sémantiques dans les configurations client OpenSSH : hôtes en double, chemins d'identité cassés, options dangereuses, algorithmes faibles, ordre des jokers et chaînes Include...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Scanner autonome et monofichier pour Joomla! JCE Editor Auteur : Hussein Mohamed masta ghimau !CAUTION 🚨 AVERTISSEMENT — À LIRE AVANT UTILISATION CECI EST UN OUTIL DE TEST DE SÉCURITÉ INTRUSIF. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems yo...

Shellcode-Test-Harness

Harness de test de shellcode Un harness de test léger conçu pour accélérer le développement de shellcode en fournissant un environnement d'exécution avec des diagnostics de plantage intégrés et une redirection de la sortie de débogage. Fonctionnalités Exécute le shellcode par écrasement de module...

prismor

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

pypacker

Informations générales Voici Pypacker : la bibliothèque de manipulation de paquets bas niveau la plus rapide et la plus simple pour Python. Voir les exemples ci-dessous pour ce que vous pouvez en faire. Si vous souhaitez soutenir ce projet, vous pouvez via PayPal. Ce que vous pouvez faire avec...