haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

haaukins

Haaukins Haaukins एक उच्च सुलभ और स्वचालित वर्चुअलाइज़ेशन प्लेटफ़ॉर्म है जो सुरक्षा शिक्षा के लिए है। इसके तीन मुख्य घटक हैं Docker, Virtualbox और Golang। घटकों के बीच संचार और ऑर्केस्ट्रेशन Go प्रोग्रामिंग भाषा का उपयोग करके प्रबंधित किया जाता है। Haaukins प्लेटफ़ॉर्म पर Go वातावरण का उपयोग करने...

CVE-2026-13297

IBM Verify Identity Access (and IBM Security Verify Access ) may be vulnerable to an information disclosure flaw in the Advanced Access Control component. The provided documents confirm the vulnerability has been addressed by IBM but do not specify affected versions, root cause details, or whethe...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

WebGoat.NET

Webgoat.NET الكود المصدري: https://github.com/jerryhoff/WebGoat.NET تحميل zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master تطبيق الويب هذا هو منصة تعليمية تحاول التعليم عن عيوب أمن الويب الشائعة. يحتوي على عيوب أمنية عامة تنطبق على معظم تطبيقات الويب. كما يحتوي على دروس تتعلق تحديدًا ...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

CVE-2026-16892

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by an improper authentication flaw (CWE-287) in the Network Authentication Service (NAS) , where a remote authenticated attacker can bypass security restrictions during service-name matching . The vulnerability carries a CVSS 3.1 score of 5.4 (ME...

CVE-2026-16892 IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching...

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

CVE-2026-17274

CVE-2026-17274 affects the Debug Server component of IBM i versions 7.6, 7.5, 7.4, and 7.3. The vulnerability stems from predictable server seeds (CWE-330: Use of Insufficiently Random Values), allowing a remote authenticated attacker to bypass security restrictions with low complexity over the n...

EUVD-2026-71476

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds...

ECHO-8ABC-2ECA-7183

Bulletin has no description...

CVE-2016-6663

لا يحتوي هذا المستودع على ملف README...

cicd-sensor

🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...

pulsegram

PulseGram PulseGram هو مسجل ضغطات مفاتيح مدمج مع بوت تيليجرام. إنها أداة مراقبة تلتقط ضغطات المفاتيح، محتوى الحافظة، ولقطات الشاشة، وترسل جميع المعلومات إلى بوت تيليجرام مكوّن. صُممت لاستخدامها في محاكاة الخصوم واختبارات الأمان. ⚠️ تحذير: هذا المشروع للأغراض التعليمية واختبار الأمان في بيئات مصرح...

SigPloit

قائمة المساهمين Rosalia D'Alessandro Ilario Dal Grande SigPloit SigPloit هو إطار عمل لاختبار أمان الإشارات مخصص لمحترفي و باحثي أمن الاتصالات لاختبار الاختراق واستغلال الثغرات في بروتوكولات الإشارات المستخدمة في مشغلي الهواتف المحمولة بغض النظر عن الجيل المستخدم. يهدف SigPloit إلى تغطية جميع...

jwt-cracker

jwt-cracker Simple HS256, HS384 & HS512 JWT token brute force cracker. Effective only to crack JWT tokens with weak secrets. Recommendation : Use strong long secrets or RS256 tokens. Install With npm: root@kitploit: npm install --global jwt-cracker Usage From command line: root@kitploit:...