Lucene search
+L

1901 matches found

Kitploit
Kitploit
added 2026/08/31 8:51 a.m.3 views

cicd-sensor

このリポジトリには README がありません。...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 3:10 a.m.3 views

supply-chain-guard

Supply Chain Guard SCG Un kit de herramientas de respuesta a incidentes para ataques a la cadena de suministro de npm/yarn y Python pip/poetry/uv — gratuito, local, sin dependencias. SCG no es un motor de escaneo que compite con herramientas comerciales en cobertura. Es una habilidad de Claude Co...

6.5CVSS5.1AI score0.02099EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 12:24 a.m.5 views

trivysupplychainanalysis

多阶段CI/CD供应链攻击的定量分析 一个经过形式化验证、定量重建 的2026年3月Trivy / "TeamPCP" GitHub Actions供应链入侵事件(CVE-2026-33634 )——在TLA+中建模,由TLC穷举检查,并通过PRISM概率模型检验器量化。 论文中的每一个数字都从这个仓库重新生成。 模型、概率、语料库测量和校准结果均可从源码通过每层一个命令重现。 事件经过与本研究证明的内容 攻击者能够移动一个广泛使用的Action(trivy-action /...

9.4CVSS7.4AI score0.59164EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/30 7:18 a.m.5 views

moltis

Moltis — 一个用 Rust 编写的安全持久化个人代理服务器 一个二进制文件 — 沙箱化、安全、属于你。 安装 • 对比 • 架构 • 安全 • 功能 • 工作原理 • 贡献 Moltis 最近登上了 Hacker News 首页。如果遇到任何不便之处,请提交 issue。我正专注于让 Moltis 变得卓越。 安全设计 — 你的密钥永远不会离开你的机器。每条命令都在沙箱容器中运行,绝不会在你的主机上执行。 你的硬件 — 可在 Mac Mini、Raspberry Pi 或你拥有的任何服务器上运行。一个 Rust 二进制文件,无需 Node.js、无需 npm、无需运行时。 功能齐...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/30 7:17 a.m.4 views

proxy

git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/29 2:05 p.m.4 views

scan-shai-hulud

scan-shai-hulud Ein schneller, dependencies-freier Bash-Scanner, der erkennt, ob Ihr System von der Lieferketten-Attacke CVE-2026-45321 „Mini Shai-Hulud“ betroffen ist. Am 11. Mai 2026 wurden über 170 npm-Pakete und 2 PyPI-Pakete bei TanStack, Mistral AI, UiPath, OpenSearch und Guardrails AI...

9.6CVSS7.4AI score0.02342EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/29 10:11 a.m.5 views

tanscript-exploit-check

Mini Shai-Hulud Supply Chain Attack — IOC Checker root@kitploit: curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash Oder klonen und lokal ausführen: root@kitploit: git clone https://github.com/nkopylov/tanscript-exploit-check.git cd...

9.6CVSS7.4AI score0.02342EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/08/29 8:47 a.m.4 views

CVE-2026-45321-Tanstack

Simulation eines Supply-Chain-Angriffs – CVE-2026-45321 TanStack Bildungs-Labor zum Verständnis von npm-Supply-Chain-Angriffen, CI/CD-Missbrauch und Installationszeit-Codeausführung Haftungsausschluss Dieses Projekt wurde nur erstellt für: Cybersicherheitsausbildung, defensive Sicherheitsforschun...

9.6CVSS7.4AI score0.02342EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/29 6:08 a.m.5 views

DEFCON-CICD-pipelines-workshop

CI/CD : Il nuovo Eldorado ? Abstract Le pipeline CI/CD stanno diventando sempre più parte dell'infrastruttura standard all'interno dei team di sviluppo; con l'avvento di nuovi approcci come Infrastructure as Code, il livello di sensibilità di tali pipeline sta aumentando rapidamente. In caso di...

5.9AI score
SaveExploits0References4
OSV
OSV
added 2026/08/28 11:17 p.m.6 views

MAL-2026-15532 Malicious code in confluence-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d314e75faa527b1c10dbc34b2867180fb0726f2547d9b0edd0564aec3e38fd8 package.json declares a self-referential dependency whose key equals the package's own name confluence-rest and whose value is the bare HTTPS URL...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 9:38 p.m.3 views

SupplyChainAttacks

Attacchi alla catena di fornitura del firmware Questo repository offre una raccolta curata e completa di attacchi documentati alla catena di fornitura del firmware, scoperti o analizzati dal team Binarly REsearch. Mantenuto da Binarly, il progetto funge da risorsa educativa e di riferimento per...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 8:11 p.m.9 views

guarddog

GuardDog GuardDog è uno strumento CLI che identifica pacchetti PyPI e npm dannosi, moduli Go, crate Rust, gemme RubyGems, azioni GitHub o estensioni VSCode. Esegue analisi statica sul codice sorgente dei pacchetti attraverso regole YARA e analizza i metadati dei pacchetti per rilevare attacchi al...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 8:02 p.m.6 views

AI-Security-Newsletter

KI-Sicherheits-Newsletter – Juni 2026 Eine Zusammenfassung der neuesten KI-Sicherheitsforschung, Einblicke, Berichte, anstehende Veranstaltungen sowie Tools und Ressourcen. Folgen Sie der AISecHub-Community und unserer LinkedIn-Gruppe für weitere Updates. Schauen Sie sich auch unser Projekt Aweso...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 8:02 p.m.4 views

glassworm-hunter

glassworm-hunter Rileva i payload dell'attacco alla supply chain GlassWorm sulla tua macchina. Scansiona estensioni VS Code, pacchetti npm, pacchetti Python e repository git. Questo scanner rileva la tecnica di attacco stessa - payload invisibili con selettori di variazione Unicode, pattern di...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 5:47 p.m.5 views

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Envenenamento de Imagens no Docker Registry V2 Schema 1 Código do Programa Python Flask + Shell root@kitploit: dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers':...

7.1CVSS6.6AI score0.00235EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 4:55 p.m.4 views

teampcp-supply-chain-attack

Attacco alla Supply Chain di TeamPCP: Guida Tecnica e al Rilevamento CVE-2026-33634 CVSS 9.4 — L'attacco alla supply chain CI/CD più impattante del 2026 finora. Tra il 19 e il 25 marzo 2026, l'attore della minaccia TeamPCP monitorato anche come DeadCatx3, PCPcat, ShellForce, CanisterWorm ha...

9.4CVSS9.1AI score0.59164EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/28 3:49 p.m.3 views

Kaspersky_CVE-2024-3094

Sicherheitsüberprüfung: CVE-2024-3094 XZ Utils Backdoor Autor: Ivan Sushin Datum: März 2026 1. Projektbeschreibung Dieses Repository enthält die Ergebnisse einer vollständigen Sicherheitsüberprüfung der Schwachstelle CVE-2024-3094 Supply-Chain-Angriff in der Bibliothek XZ Utils. Ziel der Arbeit:...

10CVSS7.4AI score0.85974EPSS
SaveExploits41
OSV
OSV
added 2026/08/28 3:35 p.m.7 views

MAL-2026-14712 Malicious code in 3layerdipstackcrikda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff4e946325299e0b7aa9b7915753f7c3db5ff81df80e9e206e41f034de7fad0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 2:18 p.m.2 views

scavenger_scanner

Scanner CVE-2025-54313 - Rilevamento di Indicatori di Compromissione Scanner multipiattaforma per rilevare gli Indicatori di Compromissione IOC correlati all'attacco alla supply chain di eslint-config-prettier CVE-2025-54313. Il 18 luglio 2025, diversi pacchetti npm popolari sono stati compromess...

7.5CVSS6.8AI score0.04348EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/28 12:31 p.m.4 views

soc-investigation-lab

Laboratorio di Indagine SOC End-to-End Esegue una catena di attacco completa in quattro fasi Ricognizione → Sfruttamento → Persistenza → Esfiltrazione contro Metasploitable2, raccoglie prove in ogni fase e produce una timeline strutturata dell'incidente e un report SOC — dimostrando un pensiero...

5.3AI score
SaveExploits0
Rows per page
Query Builder