DetectionLabELK

DetectionLabELK DetectionLabELK هو فرع من DetectionLab الخاص بـ Chris Long مع مجموعة ELK بدلاً من Splunk. الوصف: DetectionLabELK هو المختبر المثالي للاستخدام إذا كنت ترغب في بناء قدرات كشف فعالة. لقد تم تصميمه مع وضع المدافعين في الاعتبار. غرضه الأساسي هو السماح للفرق الزرقاء ببناء نطاق Windows...

xioc

xioc Extrait les indicateurs de compromission d'un texte, y compris les versions « échappées » comme hxxp://banana.com, 1.1.1.1 et phish at malicious dot com. Installation Téléchargez un binaire précompilé depuis https://github.com/assafmo/xioc/releases...

CyberRange

نظرة عامة: يمثل مشروع سايبر رينج هذا أول مخطط مفتوح المصدر لسايبر رينج في العالم. يوفر هذا المشروع إطار عمل تمهيدي لمجموعة كاملة من أدوات الهجوم والدفاع والهندسة العكسية والاستخبارات الأمنية في مختبر أبحاث خاص باستخدام سحابة AWS. يحتوي هذا المشروع على أنظمة ضعيفة ومجموعة أدوات من أقوى الأدوات...

Nuclei-Templates-Collection

https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...

vuln_apps

vulnapps Парк намеренно уязвимых приложений, на которые можно нацеливать инструменты безопасности crossfyre, Burp, ZAP, nuclei и так далее. В этой папке нет исходного кода приложений — только каркасные определения и небольшой менеджер. Каждое приложение работает как собственный изолированный стек...

CISA-KEV

CISA-KEV Краткое содержание Этот репозиторий обеспечивает автоматизированное отслеживание и анализ обоих каталогов CISA KEV и VulnCheck KEV в перекрёстной привязке с шаблонами безопасности Nuclei и публичными эксплойтами proof-of-concept. Благодаря интеграции VulnCheck KEV покрытие расширяется с...

bissap

bissap root@kitploit: %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

AtlassianPwn

В этом репозитории нет README...

Python

بايثون...

GO-2026-6213 vulnerabilities

Vulnerabilities for packages: argo-events, gitlab-runner, scorecard, kubevela, k9s, flux, kots, goreleaser, pulumi-language-dotnet, kargo, kubescape, crossplane, bom, pulumi, argo-cd, pulumi-language-yaml, witness, argo-workflows, kyverno, snyk-cli, cerbos, gptscript, kaniko, rancher-fleet, act,...

CVE-2025-71339

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.evallength gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation...

CVE-2026-53655

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

PT-2026-49577

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.16 Description An interpretation differential exists in how the software parses tar archives. The issue occurs because the library applies a PAX extended header's size= record and other PAX overrides to the next...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: ctop, flux, juicefs-csi-driver, opa-envoy, dapr, harbor, logstash-exporter, fscrypt, docker-machine-driver-harvester, aws-node-termination-handler, pulumi-language-yaml, oras, spiffe-helper, smokescreen, git-lfs, witness, crossplane-provider-azure-managedidentity,...

EUVD-2026-3672

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

BIT-FLUX-2022-24877 Improper path handling in kustomization files allows path traversal

Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...

Windows

Windows Awesome tools to play with Windows ! List of tools used for exploiting Windows: - Exploitation : Windows Software Exploitation - hacking-team-windows-kernel-lpe : Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar. - mimikatz : A little tool to play with...