1444685 matches found
NoiseHound
NoiseHound...
Sandb0x-Xtract0r
SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...
awesome-web3-security
awesome-web3-security A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below,...
Zeek-Intelligence-Feeds
Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...
rhabdomancer
rhabdomancer...
pmg
Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use...
BAS-Guardian
⚠️ Repositorio Archivado Este repositorio ha sido archivado y ya no recibe mantenimiento. Todo el desarrollo continúa en el monorepo unificado ICS OT Protector : https://github.com/spinfosecurity/ics-ot-protector Dónde encontrar este escáner...
VCG
==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...
bitbucket-iac-scan
Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...
inspec_CVE-2016-5195
Inspec profile for detecting CVE-2016-5195 aka Dirty COW. This profile contains one control which executes steps detailed here to assess vulnerability. More information on Dirty COW and the script. Please note this test takes a few minutes to execute...
CVE-2024-32002-hook
Este repositorio no tiene un README...
CVE-2026-89080
The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...
EUVD-2026-76959
The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...
CVE-2026-89080
The Really Simple Security WordPress plugin before 9.8.1 is vulnerable to an unauthenticated 2FA bypass via email provider state demotion . A request that resets a completed email two-factor enrolment allows an attacker who already possesses the account's password to bypass the second factor and ...
CVE-2026-89080 Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion
The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...
ZombieVPN
ZombieVPN This repo contains everything you need to know about CVE-2020-12828...
cloud-doctor
cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...
dnsgen
DNSGen 2.0 - Advanced DNS Name Permutation Engine 🚀 DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain name variations to assist in subdomain discovery and security assessments. ✨ Features 🔍 Smart...
cfn_nag
Background The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for: IAM rules that are too permissive wildcards Security group rules that are too permissive wildcards Access logs that aren't enabled Encryption...