dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

qiling

Qiling 的使用案例、博客及相关工作 Qiling 是一个高级二进制模拟框架，具有以下特性： 模拟多平台：Windows、macOS、Linux、Android、BSD、UEFI、DOS、MBR。 模拟多架构：8086、X86、X8664、ARM、ARM64、MIPS、RISC-V、PowerPC。 支持多种文件格式：PE、Mach-O、ELF、COM、MBR。 通过 Demigod 支持 Windows 驱动 .sys、Linux 内核模块 .ko 及 macOS 内核 .kext。 在隔离环境中模拟并沙箱化代码。 提供完全可配置的沙箱。...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

KNX-Bus-Dump

KNX Bus Dump KNX is a popular building automation protocol and is used to interconnect sensors, actuators and other components of a smart building together. Our KNX Bus Dump tool uses the Calimero java library, which we contributed to for the sake of this tool, to record the telegrams sent over a...

dc-sonar

DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It's only for education purposes. Avoid using it on the production Active Directory AD domain. Neither contributor incur any responsibilit...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

ChameleonMini

ChameleonMini Este NO es el repositorio oficial de ChameleonMini, una herramienta portátil libremente programable para el análisis de seguridad NFC que puede emular y clonar tarjetas sin contacto, leer etiquetas RFID y capturar/registrar datos RF. Este repositorio añade soporte para el Chameleon...

Sandb0x-Xtract0r

SandB0x-Xtract0r...

TEE-reversing

Fundamentos de TEE y conceptos generales Introducción al entorno de ejecución confiable: TrustZone de ARM https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html Introducción a TEE título original: TEEを中心とするCPUセキュリティ機能の動向...

revera

Revera La calificación crediticia de los paquetes npm. Revera te ayuda a decidir si vale la pena instalar un paquete antes de ejecutar npm install. Analiza la calidad del paquete, el mantenimiento, la seguridad, la salud del ecosistema y la confianza del publicador — y ahora propaga el riesgo de...

RFC-Security-Research

RFC-Security-Research Documento original y scripts auxiliares para ayudar a analizar los aspectos de seguridad de los RFC de Internet. Descripción general Este repositorio alberga una revisión de la seguridad de los RFC redactada al estilo de un RFC, además de varios scripts auxiliares de Python...

CVE-2020-1054

CVE-2020-1054 análisis https://bbs.pediy.com/thread-260884.htm...

Sandb0x-Xtract0r v0.15.0

SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

Runtime Skill Audit: Targeted Runtime Probing for Agent Skill Security

Agent skills let LLM agents reuse instructions, resources, tools, and workflows, but they also create a new place for malicious behavior to hide. A skill may look benign in its documentation or code while becoming harmful only when it is invoked with particular user requests, local assets,...

Ternary Public-Key Cryptosystem

Public-key cryptosystems eliminate the requirement for pre-shared secret keys by enabling encryption with a publicly disclosed key and decryption with a corresponding private key. In this article we generalize the public-key cryptosystems to ternary algebraic structures, with particular attention...

Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem

We analyzed 3,984 AI agent skills from major marketplaces and found 76 confirmed malicious payloads, including credential theft, backdoor installation, and data exfiltration. 13.4% of all skills contain at least one critical-level security issue and at least 8 manually confirmed malicious skills...

Toward Securing AI Agents like Operating Systems

Autonomous agents based on large language models LLMs are rapidly emerging as a general-purpose technology, with recent systems such as OpenClaw extending their capabilities through broad tool use, third-party skills, and deeper integration into user environments. At the same time, these agentic...

security-skills

Security Skills Security Skills is a Hermes Agent skill pack...

PT-2026-39742

CVE-2026-20352 iOS 26.3-Research A Public Open-Source research framework with .py and .sh files created for analyzing iOS 26.3 security mechanisms. This project is designed to be advanced through the collective in... https://t.co/5O6AR6f6H7...