pack

Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

cynative

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...

overlord

Overlord – 레드팀 자동화 Red Teaming Automation Overlord는 파이썬 기반 콘솔 CLI를 제공하며, 이를 통해 레드팀 인프라를 자동으로 구축할 수 있습니다. 사용자는 도구의 모듈예: C2, 이메일 서버, HTTP 웹 전달 서버, 피싱 서버 등을 사용하여 입력을 제공하고, 선택한 클라우드 제공업체에 전체 인프라/모듈 및 스크립트가 자동으로 생성됩니다. 현재 AWS와 Digital Ocean을 지원합니다. 이 도구는 아직 개발 중이며, GitHub에서 찾을 수 있는 Red-Baron Terraform...

AzureGoat

AzureGoat : A Damn Vulnerable Azure Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure...

Le Panthéon de la Souveraineté

🏠 Developed on: GitLab | 🪞 Automated mirror on: GitHub 🏛️ The Pantheon of Sovereignty A 100% sovereign, redundant and secure cloud infrastructure, designed to completely break free from GAFAM. Version 1.1: Private network foundation, DNS request encryption for servers DoT and multi-datacenter...

The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations

Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As organizations manage more identities, devices, data, and internet-facing infrastructure, security is shifting toward continuous visibilit...

CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 Rapid Reset Attack 이 저장소는 CVE-2023-44487 취약점, 일명 HTTP/2 Rapid Reset Attack 의 익스플로잇을 시연하기 위한 개념 증명PoC을 포함하고 있습니다. 이 취약점은 HTTP/2 프로토콜에 영향을 미치며, 공격자가 RSTSTREAM을 통해 빠르게 종료되는 스트림을 사용하여 웹 서버에 과부하를 발생시킬 수 있습니다. 📌 설명 CVE-2023-44487 은 HTTP/2 프로토콜의 취약점으로, 공격자가 대규모 분산 서비스 거부DDoS...

azure-vulnerability-remediation-project

취약점 연구 및 조치: Azure 클라우드 인프라 프로젝트 개요 이 프로젝트는 클라우드 호스팅 Windows Server 2025 인스턴스CyberVM에 대한 종단 간 취약점 관리 수명 주기를 기록합니다. 이 랩은 직접적인 소프트웨어 패치와 아키텍처 보완 제어를 모두 사용하여 심각도가 높은 보안 위험을 식별, 분석 및 차단하는 사전 예방적 접근 방식을 보여줍니다. 1. 식별 및 기준 평가 초기 자격 증명 스캔은 Nessus Essentials 를 사용하여 보안 기준을 설정하기 위해 수행되었습니다. 스캔 결과 총 66개의 취약점...

cynative v1.11.3

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...

agent-bom v0.104.0

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Self-host · Deployment models · Quick start · Product tour · Docs agent-bom finds the AI agents, MCP servers, packages and credentials in a repository, w...

cloudquery cli-v6.42.2

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

CVE-2026-71417

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:05+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-pxmc-2ffp-8j67...

CVE-2026-67620

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULTDENYLIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticate...

EUVD-2026-54793

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULTDENYLIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticate...

CVE-2026-48034: Improper Access Control

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, there is a bypass via decoy sibling resources targeting a different bucket. This issue has been patched in version 1.4.0...

GO-2026-5609 OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) in github.com/openbao/openbao

OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction DoS in github.com/openbao/openbao...