sig_finder

SigFinder Permite encontrar firmas binarias con comodines en un búfer determinado. El comodín se define mediante ? y puede utilizarse para enmascarar un nibble. Ejemplos de firmas válidas: 23 56 12 68 55 0? 34 12 40 ?? 4? 8? e? La lista de firmas puede proporcionarse como un archivo en formato SI...

flareprox

FlareProx 🔥 Rotación simple de IP y redirección de URL mediante Cloudflare Workers FlareProx despliega automáticamente endpoints de proxy HTTP en Cloudflare Workers para redirigir fácilmente todo el tráfico a cualquier URL que especifiques. Soporta todos los métodos HTTP GET, POST, PUT, DELETE,...

pisiguard

PISIGuard Protege tu información personal y sensible cuando chateas con IA PISIGuard : P ersonally I dentifiable & S ensitive I nformation Guard Demo de PISIGuard: los datos sensibles se detectan, enmascaran y restauran directamente en el navegador Construí PISIGuard porque me horroriza cuánta...

mip22

mip22 mip22 v3.3 mip22 es una herramienta avanzada de phishing 83 sitios web predeterminados, clona cualquier sitio con método manual, agrega cualquier sitio con método personalizado, enmascara enlaces con subdominios, acortador de URL, notificación de audio para ver las credenciales en vivo,...

EUVD-2026-95156

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

CVE-2026-105570 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

CVE-2026-105570

Docker Sandboxes are vulnerable to a security bypass where OAuth response masking can be circumvented using a case-variant token host . The root cause is a discrepancy in case sensitivity handling: the system compares OAuth token-endpoint hostnames case-sensitvely for masking decisions, but reque...

Facad1ng

Si encuentras útil este repositorio de GitHub, ¡considera darle una estrella! ⭐️ Facad1ng es una herramienta de análisis y enmascaramiento de URL de código abierto diseñada para investigación de seguridad, concienciación sobre phishing y pruebas defensivas. Demuestra cómo los adversarios pueden...

cloudgpt

CloudGPT Escáner de vulnerabilidades de AWS Escanea las políticas administradas por el cliente de AWS en busca de vulnerabilidades mediante ChatGPT. Esta herramienta enmascara automáticamente el número de cuenta del cliente reemplazándolo con un número de cuenta generado aleatoriamente antes de...

meterssh

Nombre de la herramienta: MeterSSH Escrito por: David Kennedy Empresa: TrustedSec Sitio web: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH es una forma de tomar shellcode, inyectarlo en la memoria y luego tunelizar el puerto que desees a través de SSH para enmascarar...

maskphish

👨‍💻️ 저자 : jaykali 🔥 MaskPhish MaskPhish는 피싱 도구가 아닙니다. 이는 "URL 제작 기술"의 개념 증명일 뿐입니다. 피싱 URL을 일반적인 URLgoogle.com 또는 facebook.com처럼 보이도록 숨기는 간단한 Bash 스크립트입니다. URL을 정당하게 보이도록 하기 위해 적절한 크레딧과 함께 피싱 도구에 통합할 수 있습니다. ⚖️ 법적 고지: 교육 목적으로만 사용하세요 사전 상호 동의 없이 대상을 공격하기 위해 MaskPhish를 사용하는 것은 불법입니다. 최종 사용자는 모든 해당 지역,...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

PT-2026-108133

Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes performed case-sensitive comparisons of OAuth token-endpoint hostnames when determining if managed credential responses should be masked, whereas request routing...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

AgentDoxx: Agentic Re-Identification of Anonymized Text with Web Search

As Large Language Models LLMs gain tool use capabilities such as web search, they can retrieve and cross-reference public information, creating privacy risks beyond memorization. One manifestation is re-identification: linking an anonymized interview transcript to a named individual. Yet without...

CallStackMasker

CallStackMasker Este repositorio demuestra una técnica de prueba de concepto PoC para suplantar dinámicamente pilas de llamadas mediante temporizadores. Antes de que nuestro implante entre en suspensión, podemos poner en cola temporizadores para sobrescribir su pila de llamadas con una falsa y...

CVE-2026-104002

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...