username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

teatime

Teatime - Un Framework di Attacco RPC per Blockchain .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime .. image::...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

jackhammer

Jackhammer: Uno strumento di valutazione/gestione delle vulnerabilità di sicurezza per risolvere tutti i problemi del team di sicurezza. Cos'è Jackhammer? Jackhammer è uno strumento di collaborazione creato con l'obiettivo di colmare il divario tra il team di sicurezza e il team di sviluppo, il...

raptor

Raptor è uno scanner di vulnerabilità sorgente basato sul web web-service + UI incentrato su GitHub; scansiona un repository semplicemente con l'URL del repo GitHub. Puoi configurare webhook per garantire scansioni automatiche ogni volta che fai un commit o unisci una pull request. La scansione...

CTFd

CTFd क्या है? CTFd एक Capture The Flag फ्रेमवर्क है जो उपयोग में आसानी और अनुकूलन-क्षमता पर केंद्रित है। इसमें CTF चलाने के लिए आवश्यक सब कुछ शामिल है और इसे प्लगइन्स तथा थीम के साथ अनुकूलित करना आसान है। विशेषताएँ एडमिन इंटरफ़ेस से अपनी खुद की चुनौतियाँ, श्रेणियाँ, संकेत और फ़्लैग बनाएँ डायनेमिक...

web

Je n'ai pas encore de données. C'est une erreur capitale de théoriser avant d'avoir des données. Insensiblement, on commence à tordre les faits pour les adapter aux théories, au lieu d'adapter les théories aux faits. 🚧 ⚠️ Travail en cours ; Pas encore prêt pour une utilisation,mais ça vient ⚠️ 🚧...

Manalyze

Manalyze Introduzione Manalyze è un tool di analisi statica per file PE che puoi utilizzare per condurre una valutazione primaria su un eseguibile o un insieme di eseguibili. Raccoglie segnali deboli che potrebbero indicare un comportamento malevolo e mostra informazioni che possono aiutare una...

owtf

Offensive Web Testing Framework OWTF OWASP OWTF aiuta i penetration tester a rimanere efficienti e allineati con gli standard di sicurezza come l'OWASP Testing Guide v3 e v4, l'OWASP Top 10, PTES e NIST, in modo che abbiano più tempo per: Vedere il quadro generale e pensare fuori dagli schemi...

[SECURITY] Fedora 44 Update: gstreamer1-1.28.1-1.fc44

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

Fedora 42 : complyctl (2025-ff84d4bc22)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ff84d4bc22 advisory. First minor release of complyctl - a new command line Interface for Fedora compliance assessment. It features a decoupled plug-in architecture for flexibilit...

pwntools

This is a CTF Capture The Flag framework and exploit development library. It is written in Python and provides a set of tools for developing and executing exploits. The library is designed to be extensible and customizable, allowing users to easily add new functionality and plugins. The library i...

pwntools

This is a CTF framework and exploit development library. It is a Python library for exploit development and reverse engineering. The library provides a set of tools for creating and executing exploits, as well as for analyzing and debugging binary files. The library is designed to be extensible a...

[SECURITY] Fedora 42 Update: libblockdev-3.3.1-1.fc42

The libblockdev is a C library with GObject introspection support that can be used for doing low-level operations with block devices like setting up LVM, BTRFS, LUKS or MD RAID. The library uses plugins LVM, BTRFS,... and serves as a thin wrapper around its plugins' functionality. All the plugins...

ALSA-2025:A005 Important: libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology like LVM, Btrfs, MD RAID, Swap,... is implemented in a separate plugin, possibly with multiple implementations e.g. using LVM CLI or the new LVM...

[SECURITY] Fedora 40 Update: modello-2.1.2-6.fc40

Modello is a Data Model toolkit in use by the Apache Maven Project. Modello is a framework for code generation from a simple model. Modello generates code from a simple model format based on a plugin architecture, various types of code and descriptors can be generated from the single model,...

FIN7 Backdoor Masquerades as Ethical Hacking Tool

The notorious FIN7 cybercrime gang, a financially motivated group, is spreading a backdoor called Lizar under the guise of being a Windows pen-testing tool for ethical hackers. According to the BI.ZONE Cyber Threats Research Team, FIN7 is pretending to be a legitimate organization that hawks a...

Information leakage vulnerability in Qibo CMS

Qibo CMS system uses the core + plug-in + channel module system architecture, while then combined with visual labeling technology, can be evolved into a variety of corporate, government, education, units, school websites. Qibo CMS has an information leakage vulnerability that can be exploited by...

Security Testing Plugin for Maven & Gradle

Maven and Gradle Maven and Gradle are build automation and dependency management systems used primarily for Java projects. Their goals are to provide a uniform build system and to simplify the build process altogether. They are used for dependency management, testing, and building of simple to...

Threat Roundup for June 1-15

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 01 and June 15. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristic...