34528 matches found
malware-samples
malware-samples A collection of malware samples caught by several honeypots i handle worldwide ATTENTION: This repository contains actual malware, do not execute any of these files on your pc unless you know exactly what you are doing. All of the malware samples contained in this repository has...
CVE-2026-101028
The ash-project ash framework (versions 2.6.0 to 3.34.6 ) contains an Incorrect Authorization vulnerability in the Ash.Actions.Aggregate.run/4 function. The root cause is that the aggregate path skips applying read policies for related resources, whereas the standard read path correctly applies t...
EUVD-2026-95511
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...
CVE-2026-101028 Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...
CsWhispers
CsWhispers Source generator to add D/Invoke and indirect syscall methods to a C project. Quick Start Add the latest NuGet package to your project and allow unsafe code. Exe net481 enable enable 12 true true Create a file in your project called CsWhispers.txt and set its build action properties to...
SentinelOne-ATTACK-Queries
ATT&CK Mapped SentinelOne Queries MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity DISCONTINUED This project has been replaced by theSentinelOne-Queries repository which moves towards shareable signatures and for use in tooling. New repo is built of the work within this repository and...
trackers
Web tracking is the practice by which websites identify and collect information about users. This is generally in the form of some subset of web browsing history. With more of us now using streaming services, mobile devices, laptops, wearables and indeed Internet of Things IoT at home and at work...
Shiro-basic
Shiro-basic This is a simple Shiro-basic project .Just for pentest env...
thethe
The Threat Hunting Environment You are a Threat Hunter. While investigating, did you find yourself with more than 20 tabs opened in your browser, scattered .txt files with data and some terminals showing up in the background? theTHE centralizes all the information on an investigation in a single...
anteater
Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...
passfault
Welcome to OWASP Passfault Objective: Do Passwords Better! NOTE: This project has been discontinued, but the zxcvbn project has a very similar approach and has been quite successful. We recommend using that library. Running the Command-line Interface: 1. install java 8 jdk 2. cd commandLine 3...
overload
Overload A Python-based network stress testing tool featuring Layer 2, Layer 4, and Layer 7 attack methods for authorized security testing. !WARNING This project has been archived and is no longer actively maintained. While the source code remains available, no new features, bug fixes, or updates...
WhoDat
WhoDat Project NOTE: During development of PyDat 5, internal operations has shifted their direction leading to the retirement of the PyDat project. Although a lot of the work has been done to finalize PyDat 5's capabilities, some capabilties remain not fully tested. The WhoDat project is an...
quarantyne
=== ESTE PROYECTO ESTÁ ARCHIVADO === Quarantyne · Firewall web moderno 🛃 Seguridad web automatizada simplificada TL;DR Quarantyne es un proxy inverso que protege aplicaciones web y APIs de comportamientos fraudulentos, mal uso, bots y ciberataques en tiempo real. Requisitos Presentación...
dnscrypt-autoinstall
dnscrypt-autoinstall Este proyecto ha sido archivado, ver el último comentario en 108. Un script para instalar y configurar automáticamente DNSCrypt en sistemas basados en Linux. Descripción DNSCrypt es un protocolo para asegurar las comunicaciones entre un cliente y un resolvedor DNS mediante el...
CrackMapExec
No Longer Maintained This project is no longer mantained due to the existence of a hostile fork. CrackMapExec You are on the latest up-to-date repository of the project CrackMapExec ! 🎉 🚧 If you want to report a problem, open un Issue 🔀 If you want to contribute, open a Pull Request 💬 If you want...
vulnreport
Proyecto Abandonado Este proyecto no recibe mantenimiento actualmente y ha sido abandonado. Vulnreport Plataforma de gestión y automatización de pentesting Vulnreport es una plataforma para gestionar pruebas de penetración y generar informes de hallazgos bien formateados y procesables sin la...
envizon
envizon - by evait security EOL https://github.com/evait-security/envizon/issues/130 We evait security moved to https://gitlab.com/invuls/pentest-projects/pcf for internal project documentation. network visualization & pentest reporting Version 5.0 This tool is designed, developed and supported b...
scanner-cli
Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...
defense-matrix
Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...