azure-vulnerability-remediation-project

Investigación y Remediación de Vulnerabilidades: Infraestructura en la Nube Azure Resumen del Proyecto Este proyecto documenta el ciclo de vida completo de gestión de vulnerabilidades para una instancia de Windows Server 2025 alojada en la nube CyberVM. El laboratorio demuestra un enfoque proacti...

KSK-ITDK-CVE-2026-21509-Mitigation

Mitigación de CVE-2026-21509 Script de PowerShell con detección y remediación para CVE-2026-21509...

cve-2026-31431-fleet-remediator

CVE-2026-31431 Fleet Audit and Remediation Tool 中文说明 This project is a fleet-scale orchestrator for auditing and remediating CVE-2026-31431 on Linux hosts in enterprise/internal networks. Batch SSH login to multiple hosts Risk evidence collection and status classification Temporary mitigation...

ai-agent-security-research

Investigación de Seguridad de Agentes de IA Investigación de seguridad de código abierto sobre la infraestructura de agentes de codificación de IA. Publicado por Hodge Luke Digital Intelligence Agency Qué es esto Este repositorio contiene investigación de seguridad, análisis de vulnerabilidades y...

Exploit-Mapper

Exploit Mapper A comprehensive vulnerability management platform that analyzes security scan reports, enriches vulnerability data with exploit intelligence, and provides actionable risk scoring for prioritized remediation. Features Multi-Format Import : Support for CSV and Excel vulnerability...

CVE_kernellinux_jsh

CVEkernellinuxjsh — kernelsec Framework Author: jshDevs · Version: 0.1.0-scaffold · License: MIT Modular Bash framework for auditing and remediating critical Linux kernel CVEs on RPM-based distributions AlmaLinux 8/9, Rocky Linux 8/9, CentOS Stream 8/9/10. Covered CVEs...

WinFlesher

Like PingCastle went out for drinks with Bloodhound, and they actually decided to get some work done. 🍷 WinFlesher is an advanced attack surface security assessment framework designed to analyze, evaluate, and report on security postures, attack paths, and remediation strategies in complex...

Ubuntu-CVE-2026-3888-patcher

🛡️ CVE-2026-3888 Remediation Script Many Hat Group Security Advisory Tool Overview This script has been developed by Many Hat Group to quickly identify and remediate systems affected by CVE-2026-3888 on Ubuntu environments. It is designed for use across managed fleets, providing: Automated...

teamcity-cve-2026-63077-remediation

Enterprise Security Remediation Suite A production-grade security engineering suite containing four specialized incident response and hardening packages. 📁 Repository Module Architecture root@kitploit: . ├── README.md Enterprise Suite Index & Quick Start ├── package.json Master test runner Jest +...

msxml4-remediation

Corrección de MSXML 4.0 PowerShell Script de PowerShell para remediar hallazgos de seguridad relacionados con Microsoft XML Core Services MSXML 4.0 , que no es compatible y suele ser marcado por los escáneres de vulnerabilidades. Este script que hice anula el registro de los archivos .dll de MSXM...

Remediate-AdobeAcrobat-CVE-2026-34621

Intune Proactive Remediation – Adobe Acrobat/Reader Version Enforcement CVE-2026-34621 This repository contains Microsoft Intune Proactive Remediation scripts to reduce exposure to Adobe Acrobat/Reader vulnerabilities by: 1. Enforcing a minimum patched version detect outdated builds and remove...

spring4shell-local-verification-lab

Proyecto de verificación local de condiciones de impacto, corrección y reprueba de Spring4Shell Introducción del proyecto Este proyecto se utiliza para aprender y verificar las condiciones de impacto, el comportamiento de riesgo, el método de corrección y el flujo de reprueba posterior de la...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == Problem Customer has old CentOS7 box which is EOL CentOS7 is running older openssl which is affected by link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 How openssl on old Centos7 should be patched for CVE? == Steps 1...

nessus-vulnerability-scanning-lab

Laboratorio de Escaneo de Vulnerabilidades con Nessus — Azure Ciclo completo de gestión de vulnerabilidades: escanear, encontrar, corregir, verificar — ejecutado contra mi entorno de laboratorio de Azure Active Directory en vivo usando un escáner Nessus dedicado desplegado con Terraform. Qué...

cPanel-Fix

cPanel & kernel security helper One security-remediation.sh for CVE-2026-41940 cPanel, CVE-2026-31431 kernel "Copy Fail", CSF, optional domain/proxy cleanup, and optional operator hardening. Maintainer: Aria Jahangiri Far Clone root@kitploit: git clone https://github.com/MrAriaNet/cPanel-Fix.git ...

nginx-cve-fix

Nginx CVE Fix - Source-Built Drop-in for nginx:1.25-bookworm A source-built nginx 1.25.5 container image that remediates two CVEs present in the official nginx:1.25-bookworm image while preserving upstream runtime behavior...

log4j-remediation

sakurajilog4j Esta herramienta se utiliza para detectar y remediar la vulnerabilidad Log4Shell CVE-2021-45105 eliminando el archivo 'JndiLookup.class' de archivos '.ear|.jar|.war' en Windows, Linux y Mac OS. Uso: Escanear el sistema operativo en busca de la vulnerabilidad Log4Shell. -...

Check-Point-Trusted-Access-Review

Check Point Trusted Access Review PLEASE ALWAYS APPLY VENDOR PATCHES AS QUICKLY AS POSSIBLE Local web app for conducting a Check Point Trusted Access Review with trusted Check Point Management API commands. Most checks are review-only. Any available remediation action requires explicit operator...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

CWP (Control Web Panel) < 0.9.8.1205 - Remote Code Execution

CWP Control Web Panel 0.9.8.1205 contains a remote code execution caused by shell metacharacters in the ttotal parameter in filemanager changePerm request, letting unauthenticated attackers execute code remotely, exploit requires knowledge of a valid non-root username. id: CVE-2025-48703 info:...