sage

Sage Seguridad para Agentes — Detección y Respuesta para asistentes de codificación con IA Sage es una capa de seguridad ligera que protege a los agentes de IA de ejecutar acciones peligrosas. Intercepta llamadas de herramientas — comandos de shell, recuperaciones de URL, escrituras de archivos —...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

Damn-Vulnerable-Drone

Damn Vulnerable Drone El Damn Vulnerable Drone es un simulador de hacking de drones intencionalmente vulnerable basado en la popular arquitectura ArduPilot/MAVLink, que proporciona un entorno realista para el hacking práctico de drones. Tabla de Contenidos Acerca del Damn Vulnerable Drone ¿Qué es...

PrivescCheck

PrivescCheck Identifica rápidamente vulnerabilidades comunes de Windows y problemas de configuración que no están necesariamente cubiertos por los estándares de seguridad públicos, y recopila información útil para tareas de explotación y post-explotación. !IMPORTANT Un aspecto importante a tener ...

sdnpwn

¿Qué es sdnpwn? sdnpwn es un kit de herramientas y un framework para probar la seguridad de las Redes Definidas por Software SDN. Para más información, consulta este artículo: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Instalación Primero descarga sdnpwn usando git git clone...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

prismor

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

frameworks_base_AOSP_06_r22_CVE-2022-20338

This repository does not have a README...

Pentest-Everything

⚔️ Pentest Everything Important Bookmark this page as other page links are likely to change or move over time. This page will always remain the same. About this book This book is my collection of notes and write-ups for various offensive security based topics and platforms. This book is generally...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detecta archivos PHP potencialmente maliciosos. ¿Qué detecta? PHP-malware-finder hace todo lo posible para detectar código ofuscado/engañoso, así como...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

tetragon

El nuevo componente Tetragon de Cilium permite una potente observabilidad de seguridad y aplicación en tiempo real basada en eBPF. Tetragon detecta y puede reaccionar ante eventos de seguridad significativos, como Eventos de ejecución de procesos Actividad de llamadas al sistema Actividad de E/S...

MakerChecker

🛡️ MakerChecker La capa de seguridad de código abierto para agentes de IA. Aplicación por defecto de denegación, aprobaciones humanas y un rastro de auditoría firmado criptográficamente — para que tu agente ejecute solo lo que se le ha concedido y no pueda probadamente aprobar su propio trabajo...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

wardriving

Wardriving Here you can find all the data about the Wardriving Workshop from Ekoparty 2017. Faraday Plugins The files starting with import are all modules to be used with the Faraday Plugin. In order to run them, download and copy to you faradayinstallation/bin/. For more info on the Faraday Plug...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

peniot

PENIOT: Penetration Testing Tool for IoT Table of Contents Project Description What is PENIOT? Why is PENIOT required? What does PENIOT provide? Build Instructions Documentation Testing Contributors Developer's Note Project Poster Project Description What is PENIOT? PENIOT is a penetration testin...

peniot

PENIOT: Herramienta de Pruebas de Penetración para IoT Tabla de Contenidos Descripción del Proyecto ¿Qué es PENIOT? ¿Por qué se necesita PENIOT? ¿Qué proporciona PENIOT? Instrucciones de Compilación Documentación Pruebas Contribuyentes Nota del Desarrollador Póster del Proyecto Descripción del...