prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...

KubiScan

!GitHub releaserelease-imgrelease !Licenselicense-imglicense A tool for scanning Kubernetes cluster for risky permissions in Kubernetes's Role-based access control RBAC authorization model. The tool was published as part of the "Securing Kubernetes Clusters by Eliminating Risky Permissions"...

Kubestroyer

!Contributorscontributors-shieldcontributors-url !Forksforks-shieldforks-url !Stargazersstars-shieldstars-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url Kubestroyer Kubestroyer aims to exploit Kubernetes clusters misconfigurations and be the swiss army knife of your...

misp-galaxy

misp-galaxy MISP galaxy is a simple method to express a large object called cluster that can be attached to MISP events or attributes. A cluster can be composed of one or more elements. Elements are expressed as key-values. There are default knowledge base such as Threat Actors, Tools, Ransomware...

munge

MUNGE Uid 'N' Gid Emporium MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating user credentials. It is designed to be highly scalable for use in an HPC cluster environment. It provides a portable API for encoding the user's identity into a tamper-proof...

Kubernetes-1.12.3-all-auto-install

Kubernetes-1.12.3-all-auto-install Project Introduction Personally organized Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 automatic one-click installation and deployment files for master and node nodes without CVE-2018-1002105 vulnerability, suitable for quick deployment in test and production...

CVE-2026-96864

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-88102

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

CVE-2026-102192

A vulnerability exists in Windows Failover Cluster due to an integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score is 7.5 (High) , indicating a significant impact on availability. No specif...

CVE-2026-96945

An uncaught exception in Windows Failover Cluster allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-248 . While specific affected versions and remediation steps are not detailed in the provided documents, the issue carries a Hi...

CVE-2026-96864

A double free vulnerability exists in the Microsoft Failover Cluster Virtual Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 score of 9.8 . While the documents confirm the impact is the...

CVE-2026-88102

A Use after free vulnerability exists in Windows Failover Cluster , which allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS score of 9.80 . No specific exploit details, affected versions, or remediation steps are provided in the docum...

CVE-2026-88099

An uncaught exception in the Windows Failover Cluster allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-248 . While the specific software versions and root cause files are not detailed in the provided documents, an offici...

CVE-2026-82329-PoC-Exploit

CVE‑2026‑82329 – JFrog Artifactory Auth Bypass Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse A...

CVE-2017-3881-exploit-cisco-

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

HAProxy-Keepalived-Sec-HighLoads

HAProxy and Keepalived LoadBalancer+Cluster+Sec+HighLoads Installation and Configuration HAProxy is an open-source software that provides a proxy server service for TCP and HTTP based applications with high availability load balancing. Keepalived is an open-source software capable of providing IP...

cve-2025-24985

cve-2025-24985 Compute the number of cluster of a VHD file to detect overflow. Supportted boot sectors: MBR GPT Usage python -m cve202524985 -f Setup Nix With direnv: direnv allow Or Without direnv: nix develop Peotry WIP Docker WIP TODO: Auto build libvhdi with poetry Setup poetry install Fix...

CVE-2026-104005

A security issue in MongoDB mongos (sharded cluster router) allows an authenticated user with readWrite privileges to cause a Denial of Service (DoS) . By crafting a specially formed aggregation pipeline, an attacker can trigger an unhandled fatal error in an internal aggregation stage that lacks...

CVE-2022-29885

CVE-2022-29885 The tool is only used for security research. It is prohibited to use the tool to launch illegal attacks, and the user is responsible for the consequences 工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 Introduce Apache Tomcat DoS CVE-2022-29885 Exploit Denial of Service in EncryptIntercept...