Intel Neural Compressor <2.5.0 - SQL Injection

Improper input validation in some IntelR Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access. id: CVE-2024-22476 info: name: Intel Neural Compressor 2.5.0 - SQL Injection author: ritikchaddha,daffainfo...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

acCOMplice

acCOMplice Tu cómplice en el secuestro de COM Autor: David Tulis @kafkaesqu3 Resumen Este repositorio contiene ejemplos de código y pruebas de concepto para explorar el secuestro de COM. El secuestro de COM es una técnica de post-explotación de Windows que puede utilizarse para la persistencia o ...

project_mantis

Project Mantis: Contraatacando al hacker de IA Inyección de prompts como defensa contra ciberataques impulsados por LLM Instalar Mantis root@kitploit: pip install -r requirements.txt Ejecutar Mantis con configuraciones predefinidas Hay varias configuraciones predefinidas disponibles en el...

NovaHypervisor

NovaHypervisor Description NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks either via Bring Your Own Vulnerable Driver BYOVD or other means by safeguarding defense products AntiVirus / Endpoint Protection and kerne...

Kraken

Kraken Kraken, a modular multi-language webshell coded by @secux11. Requirements • Support • Install • Usage • Advanced Usage • Contributing • FAQ • Acknowledgments Kraken is a modular multi-language webshell focused on web post-exploitation and defense evasion. It supports three technologies and...

skill-scanner

Skill Scanner...

DevSec-Defense

DevSec-Defense Accompanying PowerShell Modules & Demos for DevSec Defense Presentation DevSec Defense: How DevOps Practices Can Drive Detection Development For Defenders...

chameleon

19个可定制的蜜罐，用于监控网络流量、机器人活动以及用户名/密码凭证（DNS、HTTP代理、HTTP、HTTPS、SSH、POP3、IMAP、STMP、RDP、VNC、SMB、SOCKS5、Redis、TELNET、Postgres、MySQL、MSSQL、Elastic和LDAP） 如果你想在自己的项目中实现这些蜜罐，请查看 QeeqBox蜜罐 Chameleon被认为非常有效。这是一个主动防御工具。该系统模拟开放的、未受保护的端口，并应对漏洞探测尝试 — Dean Chester，cooltechzone 主编 把蜜罐带进你的生活 by Héctor Herrero, bujarra...

BEAR-C2

BEAR-C2 Adversary Simulation Framework BEAR-C2 is an adversary simulation and emulation framework built around real world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups. It provides a flexible environment for diverse engagement scenarios and delivers a realistic foundatio...

filtron

Filtron 反向HTTP代理，用于按不同规则过滤请求。可用于生产Web服务器和应用服务器之间，防止对应用后端的滥用。 此程序的初衷是保护 searx，但可用于守护任何Web应用。 安装与设置 root@kitploit: $ go install github.com/asciimoo/filtron $ "$GOPATH/bin/filtron" --help 规则 一个规则有两个必需属性：name 和 actions 一个规则可以包含以下所有属性： limit 整数 - 定义在 interval 秒内允许多少个匹配请求访问应用。（如果为 0 可省略） interval 整数 -...

Ransomware-Tool-Matrix

Matriz de Herramientas de Ransomware Este repositorio contiene una lista de las herramientas que utiliza cada banda de ransomware o banda de extorsión Como defensores, debemos aprovechar el hecho de que muchas de las herramientas utilizadas por estos ciberdelincuentes se reutilizan con frecuencia...

Portspoof

Portspoof Portspoof 在所有 65535 个 TCP 端口上模拟开放端口和服务指纹，将侦查阶段从快速扫描转变为一个漫长且资源密集的过程。扫描器会看到数千个令人信服但虚假的服务，使得识别真实攻击面变得不切实际。 目录 概述 主要特性 工作原理 设计思路 安装 配置 使用 使用 iptables 加固 Portspoof Pro 作者与许可 概述 Portspoof 的主要目标是让攻击者的侦查过程变得缓慢、代价高昂且不可靠。与标准的 5 秒 Nmap 扫描就能映射系统上每个真实服务不同，面对 Portspoof 的攻击者会看到 65535...

CVE-2026-31431-mitigation-suite

AFALG Defense Framework A kernel-runtime defense framework for the Linux AFALG Address Family Algorithm, family 38 subsystem. Built for Security Operations Centers running enterprise Linux fleets where Zero Trust must extend into the kernel, not stop at the network edge. Why AFALG matters to a SO...

memguard

MemGuard 用于在内存中存储敏感信息的软件飞地。 本包旨在降低敏感数据在内存中暴露的可能性。它支持所有主流操作系统，并使用纯 Go 编写。 特性 敏感数据在内存中使用 XSalsa20Poly1305 进行加密和认证。所使用的方案还能防御冷启动攻击。 内存分配通过系统调用直接向内核请求资源，从而绕过语言运行时，避免垃圾回收器的干扰。 存储明文数据的缓冲区通过保护页和金丝雀值进行加固，以检测越界访问和溢出。 努力防止敏感数据接触磁盘，包括锁定内存以防止交换，以及处理核心转储。 实现了内核级别的不可变性，对受保护区域的修改尝试将导致访问违规。...

RecycledInjector

RecycledInjector Description Currently Fully Undetected same-process native/.NET assembly shellcode injector based on RecycledGate by thefLink, which is also based on HellsGate + HalosGate + TartarusGate to ensure undetectable native syscalls even if one technique fails. To remain stealthy and ke...

demiguise

Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858-

-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858- Una Prueba de Concepto que demuestra la aplicación de formulaciones CTT de Navier-Stokes 3D para la optimización del flujo de paquetes y la evasión defensiva. . CTT-NSP: Teoría del Tiempo Convergente - Proyección de la Pil...

DEBIAN-CVE-2026-93228

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...