PoW-Shield

Description PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general anti-DDoS methods such as Google's ReCaptcha that has always been a pain t...

HSTP

Hyper Simple Text Protocol on Networks Try now: https://hstp.ai root@kitploit: npx hstp; The protocol aims to develop a application layer abstraction for the Hyper Service Transfer Protocol. HSTP is a recursion as nature of HSTP. This protocol implements itself as a interface. On every internet...

WordPress-Long-Password-Denial-of-Service

WordPress Denial of Service CVE-2014-9016 Disclaimer The contents of this script are intended to only be used only in an ethical manner. Do not use this script if you do not have written permission from the owner of the equipment. If you perform illegal actions, you are likely to be arrested and...

nray

nray अवलोकन Nray एक मुफ्त, प्लेटफ़ॉर्म और आर्किटेक्चर स्वतंत्र पोर्ट और एप्लिकेशन लेयर स्कैनर है। nray वितरित रूप से चलता है ताकि स्कैन की गति बढ़े और विभिन्न दृष्टिकोणों से स्कैन किया जा सके। ईवेंट-आधारित परिणाम स्कैन के दौरान जानकारी को आगे संसाधित करने की अनुमति देते हैं, उदाहरण के लिए jq जैसे...

shadowd

Logo Shadow Daemon एक वेब एप्लिकेशन फ़ायरवॉल है जो एप्लिकेशन स्तर पर अनुरोधों को रोकता है। इस रिपॉजिटरी में Shadow Daemon का मुख्य घटक है जो अनुरोधों के विश्लेषण और भंडारण को संभालता है। दस्तावेज़ीकरण पूर्ण दस्तावेज़ीकरण के लिए कृपया shadowd.zecure.org देखें। स्थापना तैयारी प्रोजेक्ट को कॉन्फ़िगर...

fingerprintx

विशेषताएँ • स्थापना • उपयोग • fingerprintx चलाना • लाइब्रेरी के रूप में उपयोग • nmap क्यों नहीं? • नोट्स • आभार fingerprintx एक उपयोगिता है जो httpx के समान है, लेकिन यह RDP, SSH, MySQL, PostgreSQL, Kafka आदि जैसी सेवाओं की फिंगरप्रिंटिंग का भी समर्थन करती है। fingerprintx का उपयोग Naabu जैसे पोर...

CVE-2026-71360 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

PT-2026-79499

Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...

CVE-2026-6540

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

EUVD-2026-51153

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

CVE-2026-6540 L7 policy bypass via unnormalized HTTP path matching

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

CVE-2026-6540

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

Linux Distros Unpatched Vulnerability : CVE-2026-11703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session...

EUVD-2026-39576

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

DEBIAN-CVE-2026-11703

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

UBUNTU-CVE-2026-11703

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

CVE-2026-11703

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

Astra Linux – Vulnerability in vsftpd

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers that implement different protocols but use compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker, who has access to the victim’s traffic at the TCP/IP layer, can redirect...

Defense in depth for autonomous AI agents

Designing Secure Autonomous AI Agents with Defense in Depth AI agents are moving beyond assistance and into action. Instead of generating content, they invoke tools, modify data, trigger workflows, and operate across systems with increasing autonomy. This shift changes the security problem...

Defending consumer web properties against modern DDoS attacks

If you own, create, or maintain online services and web portals, you’re probably aware of the dramatic upswing in DDoS attacks on your domains. AI has democratized tooling not just for us but for threat actors as well. DDoS in this era has extended from simple bandwidth saturation to sophisticate...