feroxbuster

!WARNING إشعار أمني – انتحال النطاق النطاق feroxbuster.com غير تابع لهذا المشروع أو لمطوريه أو لأي إصدار رسمي من feroxbuster. يتم توزيع التنزيلات الرسمية لـ feroxbuster فقط من خلال: https://github.com/epi052/feroxbuster مفتوح المصدر https://www.feroxbuster.pro تجاري مستودعات الحزم المذكورة في ملف...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

pmg

Package Manager Guard PMG Bloquez les paquets npm et pip malveillants avant leur installation. Une défense en profondeur pour les gestionnaires de paquets que vous utilisez déjà...

ship-safe

Находите рискованный код, уязвимости ИИ-агентов и проблемы цепочки поставок до того, как они попадут в продакшн. Веб-сайт · Документация · Безопасность и потоки данных · Бенчмарки · Цены · Блог · Участие...

pmg

Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use...

cve-2011-2523-vsftpd-validation-lab

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Validation Lab ⚠️ Authorized Lab Only — conducted in an isolated VirtualBox Host-Only network using Kali Linux and Metasploitable2. No unauthorized systems were scanned or accessed at any point. Overview CVE-2011-2523 is one of the most well-known supply chain...

moltis

Moltis — خادم وكيل شخصي آمن ودائم مكتوب بلغة Rust ملف ثنائي واحد — معزول، آمن، ملكك. التثبيت • المقارنة • البنية • الأمان • الميزات • كيف يعمل • المساهمة وصل Moltis مؤخرًا إلى الصفحة الأولى من Hacker News. يُرجى فتح مشكلة لأي عائق على الإطلاق. أنا مركّز على جعل Moltis ممتازًا. آمن بالتصميم —...

My-Presentation-Slides

My-Presentation-Slides Collections of Dhiyaneshwaran public presentation slides. You can find me at: Blog: https://dhiyaneshgeek.github.io Twitter: @DhiyaneshDk Hackerone: Geek Freak LinkedIn: Dhiyaneshwaran Balasubramaniam 2026 Hands-On Supply Chain Recon & Vendor Risk Mapping Recon Village @ DE...

CVE-Wordpress

CVE-2026-49777, CVE-2026-10735 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup & usage: root@kitploit: Follow every dir project Note: clone from...

proxy

git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...

dependency-track

OWASP Dependency-Track Dependency-Track — это интеллектуальная платформа анализа компонентов, которая позволяет организациям выявлять и снижать риски в цепочке поставок программного обеспечения. Dependency-Track использует уникальный и крайне полезный подход, основанный на возможностях Software...

WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...

DFIR_Resources_REvil_Kaseya

Ressourcen für DFIR-Experten zur Reaktion auf den REvil-Ransomware-Kaseya-Lieferkettenangriff Gestern identifizierten Sophos und Huntress Labs, dass Kaseya, ein bei MSPs beliebter Remote-Management-Anbieter, kompromittiert wurde, um einen Supply-Chain-Ransomware-Angriff durchzuführen. Eine große...

Software-Component-Verification-Standard

OWASP Software Component Verification Standard Lo Standard di Verifica dei Componenti Software SCVS è uno sforzo guidato dalla comunità volto a stabilire un quadro di riferimento per identificare attività, controlli e best practice che possano aiutare a identificare e ridurre il rischio nella...

shai-hulud-scan

shai-hulud-scan Ein Claude Code-Skill, der Maschinen auf Anzeichen einer Kompromittierung IOCs durch den Mini-Shai-Hulud -Supply-Chain-Wurm CVE-2026-45321, CVSS 9.6 scannt. Was ist Mini Shai-Hulud? Ein sich selbst verbreitender Supply-Chain-Wurm, der am 11. Mai 2026 über 170 npm/PyPI-Pakete...

xz-backdoor-research

Toolkit di Ricerca CVE-2024-3094 Di Nikolaos Natsopoulos , Consulente IAM Strumento interattivo basato su browser che accompagna il report di ricerca: "CVE-2024-3094: Compromissione della Supply Chain tramite Ingegneria Sociale e Manipolazione del Sistema di Build in XZ Utils"...

appsec-forge

appsec-forge Erstellt für Entwickler, DevOps, AppSec, DevSecOps und Sicherheitsingenieure. Eine repository-zentrierte Wissensdatenbank für Sicherheit, die sichere Entwicklung, Anwendungssicherheit, Infrastruktur, Software-Lieferkette, KI und DevSecOps abdeckt. Studiere Sicherheitsprobleme so, wie...

scan-shai-hulud

scan-shai-hulud Ein schneller, dependencies-freier Bash-Scanner, der erkennt, ob Ihr System von der Lieferketten-Attacke CVE-2026-45321 „Mini Shai-Hulud“ betroffen ist. Am 11. Mai 2026 wurden über 170 npm-Pakete und 2 PyPI-Pakete bei TanStack, Mistral AI, UiPath, OpenSearch und Guardrails AI...

inspec_cve_2019_15224

una gemma rest-client dannosa Il 19 agosto 2019 è stato scoperto che la gemma rest-client aveva diverse versioni pubblicate contenenti codice dannoso. Scoperto il rest-client dannoso, si è accertato che diverse altre nuove gemme trasportavano codice simile. Copertura:...

lunasec

LunaTrace LunaTrace è uno strumento open source per la sicurezza della supply chain e l'auditing. Al suo cuore c'è una console web che traccia i tuoi progetti e le loro dipendenze, cercando vulnerabilità e altri problemi. Questa console è fornita come SAAS disponibile qui gratuitamente oppure puo...