1436616 matches found
lunasec
LunaTrace LunaTrace 是一个开源的供应链安全审计工具。其核心是一个 Web 控制台，用于跟踪您的项目及其依赖项，查找漏洞及其他问题。该控制台以 SaaS 形式提供（在此免费获取），您也可以自行部署和管理。 更多信息请参阅 LunaTrace 文档。 简短介绍视频 仓库结构 我们是一支安全工程师团队，致力于打造出色的开源应用安全工具。所有代码都存放在这个单体仓库中，以下是各部分内容的说明。 LunaTrace ：GitHub Dependabot 或 Snyk 等服务的免费替代品，可自动监控您的依赖项是否存在漏洞。它能自动与 GitHub Pull Request 集成，...
xioc
xioc 从文本中提取入侵指标（IoC），包括被“转义/去毒化”的指标，例如 hxxp://banana.com、1.1.1.1 和 phish at malicious dot com。 安装 从 https://github.com/assafmo/xioc/releases 下载预编译二进制文件 或者...使用 go get： root@kitploit: go get -u github.com/assafmo/xioc 或者...使用 snap 安装（Ubuntu）： root@kitploit: snap install xioc 或者使用 Ubuntu PPA：...
popeye
Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...
kodex
Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...
exploits
Exploits Exploits y código de prueba de concepto del equipo de Hacker House.| Nombre de archivo | Descripción | | :------------------------------------------: | :------------------------------------------------------------------------------------------------ | | AirWatchMDMJailbreakBypass.txt |...
IRM
Spanish version Deprecated The Spanish version is available here. These cheat sheets have been written in English and Russian, and translated into Spanish by Francisco Neira from the OAS...
lockc
lockc es un software de código abierto para proporcionar auditoría de seguridad de tipo MAC Control de Acceso Obligatorio para cargas de trabajo en contenedores. La razón principal por la que lockc existe es que los contenedores no contienen. Los contenedores no son tan seguros ni aislados como l...
CVE-2024-47051
Este repositorio no tiene un README...
audit_couchdb
Audit CouchDB: 简单、清晰的CouchDB安全评估 Audit CouchDB是一个简单的工具，传递着强大的信息。给定一个Apache CouchDB URL，它会告诉你你想知道的所有关于其安全性的信息。 目标 Audit CouchDB将执行以下操作： 1. 了解关于该CouchDB的一切可能事实，例如： 服务器配置是什么？ 存在哪些用户账户？ 存在哪些用户角色？ 存在哪些数据库？ 在每个数据库中，安全设置是什么？ 在每个设计文档中，验证函数是什么？ 2. 根据这些事实，相互对比，并在发现安全隐患时发出警告，例如： 你显然没有费心去点击Futon数据库页面中的"安全"链接...
audit_couchdb
Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...
IoTGoat
Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP as a platform to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices. The vulnerability challenges are based on the OWASP IoT...
fast-security-scanners
Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...
fast-security-scanners
快速安全扫描器/检查 对社区的一点小贡献 : 我们在安全评估和漏洞监控服务中使用了所有这些工具。 检查域名的 DNS NS 接管 仓库 docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover 缓存投毒 仓库 docker run --rm -it --name wcdscanner -e VULNID=wcd -e FINDXSS=False -e DOMAIN=site.com whitespots/wcdxss...
Trend_Micro_POC
TrendMicroPOC CVE-2018-3608...
cve-mcp-server
🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...
A-xex
A-xex This project is part of a school work focusing on network security. Author not responsable for malicious use. The project is always updating About A-xex Framework root@kitploit: A-xex is a simple and intuitive tool, it joins many important tools that can help in a hack action. The goal is t...
cdf
CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...
ArchStrike
ArchStrike An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x8664, ARMv6, ARMv7, and ARMv8. Our website Our Twitter ArchStrike is a penetration testing and security repository for users of Arch Linux, following Arch Linux standards to...
cdb
Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...