aleph

.. epigraph:: Truth cannot penetrate a closed mind. If all places in the universe are in the Aleph, then all stars, all lamps, all sources of light are in it, too. -- The Aleph , Jorge Luis Borges ⚠️ PROJECT STATUS: SUNSETTING ⚠️ Our involvement with this open-source project is being sunsetted...

iGPU-Leak

CVE-2019-14615: The iGPU-Leak Vulnerability Wenjian He, Wei Zhang, Sharad Sinha and Sanjeev Das. iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU. In Proceedings of the 25th Asia and South Pacific Design Automation Conference ASP-DAC'20. View PDF View Slides What happened? ...

mhf

Mobile Helper Framework es una herramienta que automatiza el proceso de identificar el framework/tecnología utilizado para crear una aplicación móvil. Además, ayuda a encontrar información sensible o brinda sugerencias para trabajar con la plataforma identificada. ¿Cómo funciona? La herramienta...

responsible-ai-toolbox

Responsible AI Toolbox Responsible AI is an approach to assessing, developing, and deploying AI systems in a safe, trustworthy, and ethical manner, and take responsible decisions and actions. Responsible AI Toolbox is a suite of tools providing a collection of model and data exploration and...

ossem-power-up

OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...

serverless-prey

Puma Security Serverless Prey Serverless Prey is a collection of serverless functions FaaS, that, once launched to a cloud environment and invoked, establish a TCP reverse shell, enabling the user to introspect the underlying container: Panther: AWS Lambda written in Node.js Cougar: Azure Functio...

NetLlix

NetLlix Un proyecto creado con el objetivo de emular y probar la exfiltración de datos a través de diferentes protocolos de red. La emulación se realiza sin el uso de APIs nativas. Esto ayudará a los equipos azules a escribir reglas de correlación para detectar cualquier tipo de comunicación C2 o...

CVE-2026-96758 orval @orval/core before 8.28.0 Code Injection via Form-Data

orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals. Attackers can inject $... expressions into OpenAPI schema property names that execute as live interpolation when the...

Skadi

pronounced “SKAH-Dee”: similar to Scotty but with a d sound is a giantess and goddess of hunting in Norse mythology Please Read Open Letter to the users of Skadi, CyLR, and CDQR Purpose Skadi is a free, open source collection of tools that enables the collection, processing and advanced analysis ...

monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

AzureHound

AzureHound El recopilador de datos de BloodHound para Microsoft Azure Obtener AzureHound Binarios de lanzamiento Descarga el binario adecuado para tu plataforma desde uno de nuestros Lanzamientos. Lanzamiento continuo El lanzamiento continuo contiene binarios precompilados que se mantienen...

conti-pentester-guide-leak

conti-pentester-guide-leak This repository was created to archive leaked leaked pentesting materials, which were previously given to Conti ransomware group affilates: obraz Mentioned materials covers topics such us: configure the Rclone software with a MEGA for data exfiltration configure the...

CVE-2026-4921

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-18875

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert CWE-74 in the FTM AI agent server api.vectordb.runbooks.js:51. An unauthenticated attacker can insert malicious runbook content into the agent's vector database to steer...

msnm-sensor

Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...

Uscrapper

Uscrapper Vanta Presentamos Uscrapper Vanta, liberando el poder de la Inteligencia de Fuentes Abiertas, sumérgete más profundamente en la vasta web con Uscrapper Vanta, Vanta desbloquea un nuevo nivel de capacidades de extracción de datos, potenciando la exploración de los territorios desconocido...

cloudquery

CloudOps, sin el caos CloudQuery es un inventario de activos en la nube creado para equipos de plataforma. Sincroniza los metadatos de tu infraestructura en la nube a tu data warehouse, generando información y automatización. Unifica datos y proporciona contexto en AWS, Azure, GCP y más de 70...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

CVE-2020-8193

Citrix ADC Vulns CVE List https://support.citrix.com/article/CTX276688 Add if while Code https://dmaasland.github.io/posts/citrix.html root@kitploit: responsestr = json.dumpsr.headers.dict'store' if r.statuscode == 406 and "Content-Disposition" in responsestr and r.headers"Accept-Ranges" == "byte...

tenzir

Pipelines de Datos para Equipos de Seguridad Recopila, transforma, enriquece y enruta tu telemetría—todo en un solo lugar. ¿Qué es Tenzir? Tenzir es el motor de pipelines de datos para equipos de seguridad. Si necesitas recopilar, analizar, modelar, normalizar, agregar, almacenar, consultar y...