kaiju

CERT Kaiju Framework di Analisi Binaria per GHIDRA CERT Kaiju è una raccolta di strumenti di analisi binaria per Ghidra. Si tratta di un'implementazione Ghidra/Java di alcune funzionalità del CERT Pharos Binary Analysis Framework, in particolare degli strumenti di hashing delle funzioni e analisi...

Artemis

Artemis è uno scanner di vulnerabilità modulare. È lo strumento che alimenta le attività di scansione del CERT PL, controllando vari aspetti della sicurezza dei siti web e generando messaggi facili da leggere, pronti per essere inviati alle organizzazioni scansionate. Avvio rapido 🔨 |...

ChopChop

ChopChop ChopChop è uno strumento a riga di comando per il test dinamico della sicurezza delle applicazioni web, inizialmente scritto dal Michelin CERT. Il suo obiettivo è scansionare diversi endpoint e identificare l'esposizione di servizi/file/cartelle attraverso la webroot. I controlli/firme...

badssl.com

Visita badssl.com per un elenco di sottodomini di test, tra cui: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com Configurazione del server VM Ubuntu standard, record DNS A per badssl.com. e puntano alla VM...

DEBIAN-CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

mkdev

mkdev HTTPS reale per sviluppo locale — con una TUI e condivisione LAN. mkdev esegue HTTPS fidato su .local. Un singolo binario Go: autorità di certificazione + proxy inverso + /etc/hosts + broadcast mDNS + una TUI completa. Cosa lo rende diverso: Condivisione LAN Segna una route come condivisa,...

CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC für CVE-2017-16744 und CVE-2017-16748 Beweis des Konzepts PoC CVE: 2017-16744 und 2017-16748 Datum: 09/09/2019 Exploit-Autor: GainSec - Jon Gaines Hersteller-Webseite: https://www.tridium.com/ Version: Betrifft Tridium Niagara AX Versionen: 3.8 und früher, sowie Niagara 4 Versionen: 4.4 und...

clone-cert

clone-cert.sh Dies ist ein einfaches Shell-Skript, das das X.509-Zertifikat abruft, das mit einem TLS-gesicherten TCP-Port verbunden ist, und mit openssl ein ähnliches Zertifikat erstellt, indem der öffentliche Schlüssel ersetzt und die Signatur angepasst wird. Dies ist besonders nützlich, wenn S...

CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

cyber_rss

cyberrss cert 11 Оповещения ASD ACSC Австралия CERT-FR ANSSI Рекомендации CISA по кибербезопасности Рекомендации CISA по ICS Медицинские рекомендации CISA по ICS JPCERT/CC Блог JPCERT/CC UK NCSC: общая RSS-лента UK NCSC: руководства UK NCSC: новости UK NCSC: отчёты новости 11 Bleeping Computer...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

CVE-2026-75930

creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-75930...

CVE-2026-19943

creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19943...

CVE-2026-17089

creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17089...

CVE-2026-14280

creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-14280...

IRM

IRM-2022 Metodologie di Incident Response 2022 CERT Societe Generale, in collaborazione con CERT aDvens, fornisce best practice operative per incidenti di facile utilizzo. Questi cheat sheet sono dedicati alla gestione degli incidenti e coprono molteplici ambiti in cui un team CERT può essere...

Insider-Threat

Insider Threat Graph Modelle R5.2 & R6.2 Dieses Repository enthält Datenvorbereitung, Merkmalsextraktion und graphbasierte Modelle GCN-NN, GCN-BiLSTM und GCN-BiLSTM+Attention für implizite+explizite Signale zur Erkennung von Insider-Bedrohungen unter Verwendung des CMU CERT Insider Threat Test...