1444251 matches found
aegisagent
AegisAgent — AI Agent Runtime Security Gateway Puerta de enlace de seguridad en tiempo de ejecución para AI Agent: vincula criptográficamente cada llamada de herramienta a la finalización real del modelo, con ejecución de políticas de confianza cero, aislamiento en sandbox y aprobación humana...
sudo-cve-2019-18634
CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...
kics
!checkmarxhttps://img.shields.io/endpoint?url=https://pgp36n22ol.execute-api.eu-west-1.amazonaws.com/dev/cxflowcache-results%3Fstyle=plastic&logoWidth=20&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAA7EAAAOxAGVKw4bAAADbklEQVRYhc2XTWidRRSGn3MJl1AkZFFcFCkFIYKC...
webmin_CVE-2019-15107
webminCVE-2019-15107 webminCVE-2019-15107...
ROOT-APP-NPM-GHSA-H25M-26QC-WCJF GHSA-h25m-26qc-wcjf in next - Patched by Root
Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available...
lunasec
LunaTrace LunaTrace is an Open Source supply chain security and auditing tool. At its heart is a web console the tracks your projects and their dependencies, looking for vulnerabilities and other issues. This console is provided as a SAAS available here for free or you can deploy it and manage it...
usbkill
« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...
magescan
Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...
magescan
Mage 扫描 这个工具的目的是评估你无法直接访问的 Magento 网站的质量和安全性。 适用于你在面试潜在开发者或评估新客户时，想提前了解你将面临什么情况。 安装 .phar 从发布页面下载 magescan.phar 文件 使用 php 命令在命令行中运行 root@kitploit: php magescan.phar scan:all www.example.com 源码 克隆此仓库 使用 composer 安装 root@kitploit: git clone https://github.com/steverobbins/magescan magescan cd...
rustsec
RustSec Crates 🦀🛡️📦 RustSec 安全公告数据库是一个仓库，收录了针对通过 crates.io 发布的 Rust crate 提交的安全公告。 该安全公告数据库本身位于： https://github.com/RustSec/advisory-db 关于本仓库 本仓库包含一个 Cargo Workspace，其中收录了由 RustSec 项目维护的所有 crate： 名称| 描述| Crate| 文档| 构建 ---|---|---|---|--- cargo‑audit| 对照安全公告数据库审计 Cargo.lock| | | cargo‑lock| 自包含的...
CVE-2022-23773-repro
CVE-2022-23773-repro...
sipcheck
SIPCheck v.3.0 Introduction SIPCheck is a tool that watch the authentication of users of Asterisk and bans automatically if some user or bot try to register o make calls using wrong passwords. Unlike Fail2Ban, SIPCheck manage, not just the attacker, also the clients that you have trust so if you...
iac-scan-runner
IaC Scan Runner 扫描您的基础设施即代码中常见漏洞的服务。 方面| 信息 ---|--- 工具名称| IaC Scan Runner Docker 镜像| xscanner/runner PyPI 包| iac-scan-runner 文档| docs 联系我们| [email protected] 目录 描述 运行 使用 Docker 运行 从 CLI 运行 从源代码运行 许可 联系方式 致谢 目的与描述 IaC Scan Runner 是一个 REST API 服务，用于扫描...
herpaderping
Process Herpaderping Process Herpaderping is a method of obscuring the intentions of a process by modifying the content on disk after the image has been mapped. This results in curious behavior by security products and the OS itself. Summary Generally, a security product takes action on process...
CVE-2023-25813
Este repositorio no tiene un README...
badPods
Bad Pods 这是一组用于创建具有不同提升权限的 Pod 的 manifests。可快速演示允许 hostNetwork、hostPID、hostPath、hostIPC 和 privileged 等安全敏感 Pod 属性所带来的影响。 更多背景信息，请参阅我们的博客文章：Bad Pods: Kubernetes Pod 权限提升。 目录 Bad Pods 阵容 先决条件 组织方式 使用方法 总体思路 使用示例 从克隆的本地仓库创建全部八个 Bad Pods 通过 Github 创建全部八个 Bad Pods 创建全部八个反向 shell Bad Pods 使用...
whatfiles
whatfiles Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well. Rationale: I've long been frustrated at the lack of a simple utility to see which file...
CVE-2021-21973-Automateme
CVE-2021-21973-Automateme automate me!...
brawl-public-game-001
BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...