cuckoo3

Cuckoo3 - инструмент для анализа вредоносных программ О проекте Cuckoo3 — это инструмент с открытым исходным кодом для проверки подозрительных файлов или ссылок в контролируемой среде. Он проверит их в изолированномых эмулятореах платформы и создаст отчёт, показывающий, что делали файлы или...

ator

Extension d'obtention et de remplacement de jetons d'authentification Introduction Dans le monde des tests de sécurité web, l'automatisation est essentielle, et Burp Suite est le choix de prédilection. Cependant, pour vraiment exploiter la puissance de Burp pour les scans automatisés, vous avez...

reconmap

Reconmap Plateforme de gestion, d'automatisation et de rapport de tests d'intrusion Reconmap est une plateforme open source d'évaluation des vulnérabilités et de tests d'intrusion conçue pour accompagner les professionnels de la sécurité tout au long du cycle de vie d'un engagement. Elle permet a...

hsecscan

hsecscan Un scanner de sécurité pour les en-têtes de réponse HTTP. Prérequis Python 2.x Modules Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Installation $ pip install hsecscan Utilisation $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d...

nextdns

NextDNS CLI клиент NextDNS CLI — это инструмент командной строки, который позволяет использовать службу DNS-over-HTTPS DoH от NextDNS с расширенными возможностями. Хотя самые продвинутые функции будут работать только с NextDNS, эта программа может работать как клиент для любого DoH-провайдера или...

keepassxc

KeePassXC /statusIcon KeePassXC — это современный, безопасный и открытый менеджер паролей, который хранит и управляет вашей наиболее конфиденциальной информацией. KeePassXC можно запускать в системах Windows, macOS и Linux. KeePassXC предназначен для людей с очень высокими требованиями к...

ossec-hids

OSSEC v4.3.0 Informations sur OSSEC OSSEC est une plateforme complète pour surveiller et contrôler vos systèmes. Elle regroupe tous les aspects du HIDS détection d'intrusion basée sur l'hôte, de la surveillance des journaux et du SIM/SIEM dans une solution simple, puissante et open source. Visite...

CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

EUVD-2026-94367

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A security boundary bypass vulnerability exists in source-to-image due to improper sanitization of symbolic links during archive unpacking. An attacker providing a malicious builder image can embed absolute symbolic links pointing outside the extraction directory. This flaw allows the attacker to...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

aftermath

About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...

kata-containers

Kata Containers Добро пожаловать в Kata Containers! Этот репозиторий содержит код Kata Containers для релизов 2.0 и новее. Если вы хотите узнать о Kata Containers, посетите основной веб-сайт Kata Containers. Введение Kata Containers — это проект с открытым исходным кодом и сообщество, работающие...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

jadx

JADX jadx - Décompilateur Dex vers Java Outils en ligne de commande et GUI pour produire du code source Java à partir des fichiers Android Dex et Apk !WARNING Veuillez noter que dans la plupart des cas, jadx ne peut pas décompiler 100 % du code, donc des erreurs se produiront. Consultez le Guide...

tarian

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send alerts and take an automated action. Save your K8s...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

bitcrook

Bitcrook Centralize and expedite OSINT investigations View the roadmap Table of Contents Information About Disclaimer Changelog Preview Attributions Usage Installation CLI GUI Docker Authentication Information About Bitcrook is an open-source intelligence apparatus that aims to centralize all of...

commix

Commix abréviation de command injection exploiter est un outil open source de test d'intrusion, écrit par Anastasios Stasinopoulos @ancst, qui automatise la détection et l'exploitation des vulnérabilités de type command injection. Vous pouvez consulter la collection de captures d'écran présentant...

pmd

PMD - analyseur de code source PMD est un analyseur de code statique multilingue extensible. Il détecte des défauts de programmation courants comme les variables inutilisées, les blocs catch vides, la création inutile d'objets, etc. Il est principalement destiné à Java et Apex , mais supporte 16...