onionscan

什么是 OnionScan？ OnionScan 是一个用于调查暗网的免费开源工具。尽管在匿名和隐私领域有着令人惊叹的技术创新，但始终存在一个无法通过有效技术补丁解决的持续威胁——人为错误。 无论是操作安全泄露还是软件配置错误——大多数时候，对匿名的攻击并非来自破坏底层系统，而是来自我们自身。 OnionScan 有两个主要目标： 我们希望帮助隐藏服务的运营者发现并修复其服务中的操作安全问题 。我们帮助他们检测配置错误，并希望激励新一代匿名工程项目，帮助世界变得更加私密。 其次，我们希望帮助研究人员 和调查人员监控和追踪暗网站点...

lockc

lockc は、コンテナワークロードに対してMAC（強制アクセス制御）タイプのセキュリティ監査を提供するためのオープンソースソフトウェアです。 lockc が存在する主な理由は、コンテナは内包しない ことです。コンテナはVMほど安全で分離されていません。デフォルトでは、ホストOSに関する多くの情報を公開し、コンテナから「脱出」する方法を提供します。lockc は、コンテナにより多くの分離を提供し、より安全にすることを目指しています。 コンテナは内包しないドキュメントセクションでは、そのフレーズの意味と、lockc で制限したい動作の種類について説明しています。...

PanelShock

This repository does not have a README...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

doork

doork descripción doork es una herramienta de auditoría de vulnerabilidades pasiva de código abierto que automatiza el proceso de buscar en Google información sobre sitios web específicos basándose en dorks. doork puede actualizar su propia base de datos desde ghdb y usarla para encontrar fallas...

whitewidow

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

TBomb

TBomb v2.1b Una aplicación gratuita y de código abierto para bombardeo de SMS/Llamadas Anuncio Aviso importante: Debido a una combinación de contribuciones de baja calidad, solicitudes de extracción pull requests e issues basura, y mi enfoque en explorar nuevos proyectos, he tomado la decisión de...

EAST

Herramienta de Seguridad Extensible de Azure Herramienta de Seguridad Extensible de Azure referida posteriormente como E.A.S.T es una herramienta para evaluar controles de seguridad de Azure y, en cierta medida, de Azure AD. El caso de uso principal de EAST es la recopilación de datos de segurida...

metasploit-framework-nu11secur1ty

Metasploit Framework The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file. Latest Version Access the latest version of Metasploit from the Nightly Installers page. Documentation Comprehensive documentatio...

NETworkManager v2026.9.7.0

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

AperiSolve v3.7.10

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

UBUNTU-CVE-2026-68520

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...

CVE-2026-19264

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw...

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...

XSSer Penetration Testing Tool 1.9

XSSer is an open source penetration testing tool that automates the process of detecting and exploiting XSS injections against different applications. It contains several options to try to bypass certain filters, and various special techniques of code injection. 12 additions, 12 modifications, 10...

CVE-2026-50030

DataEase prior to 2.10.23 exposes the SQL preview path (DatasetDataApi.previewSql/previewSqlCheck) via /de2api/datasetData/previewSql, accepting PreviewSqlDTO.sql, PreviewSqlDTO.datasourceId, and PreviewSqlDTO.isCross. The system stores decoded SQL in datasourceRequest.query and CalciteProvider.f...

EUVD-2026-41983

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Livewire component Server\Resources exposes public methods startUnmanaged, stopUnmanaged, restartUnmanaged that accept a container ID parameter directly from the browse...

EUVD-2026-41982

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, log drain secret and environment values were interpolated into shell commands without sufficient encoding, allowing an authenticated user to inject commands executed on the...

CVE-2026-42172

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Sanctum API tokens did not expire, allowing a leaked token to retain access indefinitely until manually revoked. This issue is fixed in version 4.0.0-beta.474...

EUVD-2026-41980

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Sanctum API tokens did not expire, allowing a leaked token to retain access indefinitely until manually revoked. This issue is fixed in version 4.0.0-beta.474...