in-toto

in-toto in-toto bietet ein Framework zum Schutz der Integrität der Software-Lieferkette. Dies wird erreicht, indem überprüft wird, dass jede Aufgabe in der Kette wie geplant, nur durch autorisiertes Personal, ausgeführt wird und dass das Produkt auf dem Transportweg nicht manipuliert wird. in-tot...

keystone

Keystone Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework. It offers some unparalleled features: Multi-architecture, with support for Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ & X86 include 16/32/64bit...

dcsgonefwbsp

dcsgonefwbsp Per iniziare Per semplificare l'inizio con GitLab, ecco un elenco di passaggi successivi consigliati. Sei già un professionista? Modifica questo README.md e rendilo tuo. Vuoi semplificare? Usa il template in fondo! Aggiungi i tuoi file Crea o carica file Aggiungi file usando la riga ...

fabric

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI -...

nmap

nmap Diese Bibliothek zielt darauf ab, idiomatische nmap-Anbindungen für Go-Entwickler bereitzustellen, um das Schreiben von Sicherheits-Audit-Tools mit Golang zu erleichtern. Was ist nmap Nmap Network Mapper ist ein freier und quelloffener Netzwerkscanner, der von Gordon Lyon entwickelt wurde...

toxiproxy

Toxiproxy Toxiproxy is a framework for simulating network conditions. It's made specifically to work in testing, CI and development environments, supporting deterministic tampering with connections, but with support for randomized chaos and customization. Toxiproxy is the tool you need to prove...

criticality_score

Open-Source-Projekt-Kritikalitätsscore Beta Dieses Projekt wird von Mitgliedern der Securing Critical Projects WG gepflegt. Ziele 1. Einen Kritikalitäts-Score für jedes Open-Source-Projekt generieren. 2. Eine Liste kritischer Projekte erstellen, von denen die Open-Source-Community abhängt. 3. Die...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

CVE-2020-1472

Script di test ZeroLogon Uno script Python che utilizza la libreria Impacket per testare la vulnerabilità relativa all'exploit Zerologon CVE-2020-1472. Tenta di effettuare il bypass dell'autenticazione Netlogon. Lo script terminerà immediatamente quando il bypass viene eseguito con successo, senz...

git-crypt

git-crypt - crittografia trasparente dei file in git git-crypt abilita la crittografia e decrittografia trasparente dei file in un repository git. I file che scegli di proteggere vengono crittografati quando vengono committati e decrittografati quando vengono estratti. git-crypt ti permette di...

chisel

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

chisel

Chisel Chisel è un tunnel TCP/UDP veloce, trasportato su HTTP, protetto tramite SSH. Singolo eseguibile che include sia client che server. Scritto in Go golang. Chisel è principalmente utile per attraversare i firewall, sebbene possa anche essere utilizzato per fornire un endpoint sicuro verso la...

CVE-2026-61424

CVE-2026-61424 — DJ-Classifieds = 3.11.1 imageupload-Task → Keine Authentifizierung → 3-String-Filter-Bypass Überblick Nicht authentifizierter beliebiger Datei-Upload in DJ-Classifieds für Joomla. Der imageupload-Task-Endpunkt verarbeitet Datei-Uploads ohne Authentifizierung und verlässt sich auf...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Exploit Title: Vehicle Service Management System - 'Multiple' Datei-Upload führt zu HTML-Injection Exploit Author: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HOCH Referenzen: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

CVE-2024-48415

CVE-2024-48415 Descrizione itsourcecode Loan Management System v1.0 è vulnerabile a Cross Site Scripting XSS tramite un payload appositamente predisposto nei parametri lastname, firstname, middlename, address, contactno, email e taxid nella funzionalità new borrowers della pagina Borrowers. Tipo ...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

fulcio

Fulcio Eine kostenlos nutzbare Zertifizierungsstelle CA für die Codesignierung Fulcio ist eine kostenlos nutzbare Zertifizierungsstelle, die Codesignatur-Zertifikate für eine OpenID-Connect-Identität OIDC, wie z. B. eine E-Mail-Adresse, ausstellt. Fulcio stellt ausschließlich kurzlebige Zertifika...

magicRecon

MagicRecon: Veloce, semplice ed efficace MagicRecon è un potente script shell per massimizzare il processo di ricognizione e raccolta dati di un obiettivo e per trovare vulnerabilità comuni, il tutto salvando i risultati ottenuti in modo organizzato in directory e con vari formati. Con MagicRecon...

avml

AVML Acquire Volatile Memory for Linux Zusammenfassung Ein portables Tool zur Erfassung flüchtiger Speicherinhalte für Linux. AVML ist ein X8664-Userspace-Tool zur Erfassung flüchtiger Speicherinhalte, geschrieben in Rust, das als statische Binärdatei bereitgestellt werden soll. AVML kann verwend...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...