kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Frameworkpharos, particularly the function hashing and malware analysis tools, but is expected t...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

badssl.com

Visit badssl.com for a list of test subdomains, including: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com Server Setup Stock Ubuntu VM, DNS A records for badssl.com. and .badssl.com. pointing to the VM. Testing and development 1. Follow the instructions ...

ChopChop

ChopChop ChopChop is a command-line tool for dynamic application security testing on web applications, initially written by the Michelin CERT. Its goal is to scan several endpoints and identify exposition of services/files/folders through the webroot. Checks/Signatures are declared in a config fi...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

CVE-2026-126312

The OpenBao software versions prior to 2.6.5 and 2.7.x (before 2.7.2 ) are vulnerable to an ACL bypass via non-canonical plugin paths. This flaw exists in the AppRole, Cert, LDAP, and RADIUS authentication methods, as well as in the openbao-plugins LDAP and RADIUS auth plugins before version 0.2....

EUVD-2026-125208

OpenBao before 2.6.5 and 2.7.x before 2.7.2, and the openbao-plugins LDAP and RADIUS auth plugins before 0.2.0, contain an ACL bypass in the AppRole, Cert, LDAP, and RADIUS auth methods caused by implicit path canonicalization. Authenticated attackers can request non-canonical paths for AppRole...

clone-cert

clone-cert.sh This is a simple shell script that retrieves the X.509 certificate associated with a TLS wrapped TCP port and uses openssl to create a similar certificate by replacing the public key and fixing the signature. This is particularly useful if you want to demonstrate why self-signed...

Artemis

Artemis is a modular vulnerability scanner. It's the tool that powers CERT PL scanning activities by checking various aspects of website security and building easy-to-read messages ready to be sent to the scanned organizations. Quick Start 🔨 | Docs 📚 If you want to use additional modules that...

IIITA-IoT-Security-Research

IIIT Allahabad – IoT Security Research Internship Overview This repository showcases the work carried out during my Research Internship at the Indian Institute of Information Technology, Allahabad IIIT Allahabad under the Cryptography and Network Security CNS Lab. During this internship, I worked...

cyber_rss

cyberrss cert 11 ASD ACSC Alerts Australia CERT-FR ANSSI CISA Cybersecurity Advisories CISA ICS Advisories CISA ICS Medical Advisories JPCERT/CC JPCERT/CC Blog UK NCSC All RSS Feed UK NCSC Guidance UK NCSC News UK NCSC Reports news 11 Bleeping Computer forum BleepingComputer CyberScoop Dark Readi...

mkdev

mkdev Real HTTPS for local dev — with a TUI and LAN sharing. mkdev runs trusted HTTPS on .local. A single Go binary: cert authority + reverse proxy + /etc/hosts + mDNS broadcast + a full TUI. What makes it different: LAN sharing Mark a route shared, hit https://app.local from your phone or any...

class_struggle

Class Struggle Repository accompanying the "Class Struggle" article. The repository demonstrates use of an autoencoder for detecting domains similar to a known subset of phishing domains published by CERT Polska. Data Sources CERT Polska Warning List This project uses data from the CERT Polska...

low-int-cert-monitor

low-int-cert-monitor Detect X.509 certificates whose elliptic-curve private key is a trivially small integer public point Q = dG for small d which is the same as eMudhra. Curves: P-256, P-384, P-521. Layout p4mon/ — production monitor: in-memory Rust checker, CT-log tailer, systemd units common/ ...

GO-2026-6859 vulnerabilities

Vulnerabilities for packages: cert-manager, crossplane-provider-azure-storagecache, crossplane-provider-aws-route53recoveryreadiness-fips, starboard-exporter, crossplane-provider-azure-synapse, cilium-fips, envconsul-fips, azure-container-networking, dns-controller-manager-fips,...

globalprotect-ca-cert-ipc

c2us.exe - Launches a command as the running user in the desktop session of the logged on user. In thise case, launches cmd.exe as SYSTEM in the desktop session of the unprivileged user. c2us.c - Source code for c2us.exe. epinject.exe - Entry point injector, used to spawn a new process and inject...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

Insider-Threat

Insider Threat Graph Models R5.2 & R6.2 This repository contains data preparation, feature extraction, and graph-based models GCN-NN, GCN-BiLSTM, and GCN-BiLSTM+Attention for implicit+explicit signals for insider-threat detection using the CMU CERT Insider Threat Test Dataset R5.2, R6.2. Reposito...

PT-2026-145433

Webmin through 2.670 contains a users file injection vulnerability in acl/cert issue.cgi that allows authenticated Webmin users to inject lines by supplying unvalidated certificate DN fields containing newlines. Attackers can end a DN field with a backslash and newline to add a second root entry...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...