PersistAssist

PersistAssist PersistAssist 是一个完全模块化的持久化框架，使用 C 编写。所有持久化技术都包含一个清理方法，用于在持久化代码之外移除持久化。这是一个正在进行中的项目，因此有许多空类。此项目最初的主要目标是构建一个完全模块化的框架，使得添加新功能只需继承一个类并添加代码即可。 作者 - Victor Suarez（@Gr1mmie） 编译 PersistAssist 不会提供预编译的二进制文件，因此您需要手动编译代码。要完成此操作，请打开解决方案文件，在构建菜单中选择“Release”以及所需架构，然后点击开始。 使用 要查看帮助菜单，请使用...

CVE-2020-0096-StrandHogg2

This design flaw allows an attacker to display their own activity page on top of another application, potentially causing users to lose track of their private data. This vulnerability is called StrandHogg 2.0 and was recently disclosed by the Norwegian security company Promon. Scope: Theoreticall...

POC-2020-8558

Overview CVE-2020-8558 is a Kubernetes venerability which was published because kube-proxy unexpectedly makes localhost-bound host services available to others on the network. I place the emphasis on unexpectedly because this vulnerability is due to a design flaw oversight, not an implementation...

burner-net

BurnerNet 零信任、反取证HTTP客户端。清除秘密。切断痕迹。隐形坦克中的CPR。👻 BurnerNet 是一个 C++20 反取证 HTTP 客户端 。它提供一个流畅的、类似CPR的API，适用于不能完全信任本地机器的应用程序——从RAM中物理擦除秘密，并切断执行痕迹，以隐藏你的逻辑不被扫描器和调试器发现。 它为普通HTTP提供熟悉的主机兼容默认设置，并为敌对环境提供明确的强化配置文件。两种路径都偏爱短生命周期的客户端；高级信任由应用程序自行掌握。 正在寻找保护由BurnerNet下载的负载的方法？请查看 RipStop Codec 以进行内存中的资产解扰。 原则 • 快速开始...

buttinsky

Buttinsky Open Source Botnet Monitoring Description Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open source framework for automated botnet monitoring. The modular design will allow full...

Hale

About Hale is a botnet command & control monitor/spy with a modular design to easily develop new modules that monitor new protocols used by C&C servers. Hale comes with IRC and HTTP monitors developed with Twisted to handle scalability of a large amount of connections. Theses modules have...

logira

logira OS-level runtime auditing for unpredictable automation. logira is an observe-only Linux CLI that records runtime exec, file, and net events via eBPF. It helps you see what actually happened during AI agent runs and other forms of automation, with per-run local storage for auditing, post-ru...

cve-2025-29927

CVE-2025-29927 CVE-2025-29927 Vulnerability All versions of Next.js from 11.1.4 through 13.5.6, 14.x before 14.2.25, and 15.x before 15.2.3 are affected by this vulnerability. The impact is particularly significant for applications that rely on middleware for implementing access controls, as...

CVE-2019-17041

Rsyslog - what is it? Rsyslog is a r ocket-fast sys tem for log processing. It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide...

CVE-2021-28663

CVE-2021-28663 A basic PoC leak for CVE-2021-28663 Internal of the Android kernel backdoor vulnerability This is a basic PoC for CVE-2021-28663. A design flaw in Mali GPU Android Kernel Driver. 1. Create a GPUVA and also mmap to it so we can get virtual addr for phys pages. 2. Create an alias for...

GCPGoat

GCPGoat : Una infraestructura GCP damnificada y vulnerable Comprometer la infraestructura en la nube de una organización es como sentarse sobre una mina de oro para los atacantes. Y a veces, una simple mala configuración o una vulnerabilidad en aplicaciones web es todo lo que un atacante necesita...

postenum

Postenum facilita la vida a los profesionales de seguridad al automatizar el proceso de recopilación de información crítica del sistema después de obtener un punto de apoyo. Ayuda a detectar rápidamente configuraciones incorrectas y oportunidades de escalada de privilegios, agilizando el camino...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

fileintel

fileintel Esta es una herramienta utilizada para recopilar diversas fuentes de inteligencia para un archivo determinado. Fileintel está escrito de forma modular para que se puedan agregar fácilmente nuevas fuentes de inteligencia. Los archivos se identifican por su hash MD5, SHA1, SHA256. La sali...

ws4-secure-design-agentic-systems

CoSAI Workstream 4: Secure Design Patterns for Agentic Systems This repository is for the work of the CoSAI Workstream 4, Secure Design Patterns for Agentic Systems. CoSAI is an OASIS Open Project and an open ecosystem of AI and security experts from industry leading organizations dedicated to...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 Woori FISA Technical Seminar 6th - Team 3: Analysis and research on React2Shell, a remote code execution RCE vulnerability exploiting design flaws in React Server Component RSC Team...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

TerraformGoat

TerraformGoat Inglés | 中文 TerraformGoat es una herramienta de despliegue multinube "Vulnerable por Diseño" del laboratorio de investigación HXSecurity. Actualmente, los proveedores de nube compatibles incluyen Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform,...

Project-Vuln-Detection-N-Mitigation_101

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ Deserialization RCE CVE-2023-46604 – Phase 2 Project Security Architectures & Systems Administration Author: Vaishnavu C V · Date: 17 Sep 2025 Status: ⌀ Phase 2 deliverables complete Overview This repository documents a hands‑on security desi...