awesome-devsecops

قائمة DevSecOps الرائعة مستوحاة من اتجاه awesome- على GitHub. هذه مجموعة من المستندات والعروض التقديمية ومقاطع الفيديو والمواد التدريبية والأدوات والخدمات والقيادة العامة التي تدعم مهمة DevSecOps. هذه هي اللبنات الأساسية والقطع المفيدة التي يمكن أن تساعدك في ترتيب تجربة DevSecOps أو مساعدتك في بن...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit Ce dépôt contient un exploit basé sur Rust pour la vulnérabilité CVE-2022-22963 trouvée dans les versions 3.1.6, 3.2.2 et les versions plus anciennes non prises en charge de Spring Cloud Function. La vulnérabilité permet l’exécution de code à distance et l’accès aux...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ ما هو؟ CrackLord هو نظام مصمم لتوفير نظام قابل للتوسع وقابل للتوصيل وموزع لكل من كسر كلمات المرور وأي مهام أخرى تحتاج إلى الكثير من الموارد الحاسوبية. بشكل أدق، CrackLord هو وسيلة لموازنة تحميل الموارد، مثل وحدة المعالجة المركزية ووحدة معالجة الرسوما...

EUVD-2026-70370

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

CVE-2026-85100 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

CVE-2026-85100

A resource consumption vulnerability in 2FastLabs agent-squad (versions up to 1.1.4 ) affects the function AgentSquad.routeRequest within the Streaming Agent Response Workflow component (file agent-squad/typescript/src/orchestrator.ts). The flaw allows a remote attacker with low privileges to tri...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

file-unpumper

file-unpumper file-unpumper هي أداة سطر أوامر قوية مصممة لتنظيف وتحليل ملفات Portable Executable PE. توفر مجموعة من الميزات لمساعدة المطورين ومحترفي الأمان في العمل مع ملفات PE بشكل أكثر فعالية. الميزات إصلاح رأس PE : يمكن لـ file-unpumper إصلاح ومحاذاة رؤوس PE لملف تنفيذي معين. هذا مفيد بشكل خاص...

awesome-pentest

Awesome Penetration Testing Коллекция замечательных ресурсов по тестированию на проникновение и наступательной кибербезопасности. Тестирование на проникновение — это практика проведения авторизованных, смоделированных атак на компьютерные системы и их физическую инфраструктуру для выявления...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

CVE-2023-2255

CVE-2023-2255 RCE CVE-2023-2255 et chargement de ressources externes trouvé par @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 Exploit Simple exemple pour déposer un webshell dans le répertoire courant. root@kitploit: python3 CVE-2023-2255.py --cmd 'wget...

cve

CVE Énoncé du problème : Stackoverflow J'essaie de construire mon projet dans Docker, donc j'utilise Docker Desktop pour construire mon projet. Lorsque je construis l'image, j'obtiens ceci comme l'une de mes vulnérabilités root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Withou...

CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - ثغرة تسرب البيانات في HTTP/2 لأباتشي تومكات نظرة عامة CVE-2024-52317 هي ثغرة تؤثر على تنفيذ HTTP/2 في أباتشي تومكات. تنشأ المشكلة بسبب إعادة التدوير غير السليمة لموارد طلبات واستجابات HTTP/2، مما قد يؤدي إلى تسرب البيانات بين المستخدمين. وهذا يعني أن بيانات حسا...

EUVD-2026-70284

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...