NetAlertX

NetAlertX - Estrutura de Visibilidade de Rede & Inteligência de Ativos 📷 Clique para mais capturas de tela Acesse https://netalertx.com/ para ainda mais gifs e capturas de tela 📷. NetAlertX é uma plataforma de visibilidade de rede e inteligência de ativos para homelabs, equipes de TI, MSPs e...

CVE-2026-27771

CVE-2026-27771 — Contournement d'authentification du registre de conteneurs Gitea CVSS : N/A non divulgué Affecte : Gitea Avertissement : Cette preuve de concept est fournie à des fins éducatives et de recherche en sécurité autorisée uniquement. L'accès non autorisé à des systèmes informatiques e...

CVE-2024-24919-Exploit

CVE-2024-24919-Exploit CVE-2024-24919 एक्सप्लॉइट जो बेहतर दृश्यता के लिए अधिक फाइलों की जाँच करता है...

CVE-2026-81684

openssl_encrypt (pip package openssl-encrypt) versions ≤ 1.4.8 contain an information disclosure flaw in its desktop GUI. The steganography password is passed to a CLI child process via the --stego-password command-line argument (on both encrypt and decrypt paths) rather than through an environme...

velociraptor

Velociraptor - एंडपॉइंट दृश्यता और संग्रह टूल। Velociraptor एक उपकरण है जो Velociraptor क्वेरी भाषा VQL क्वेरी का उपयोग करके होस्ट-आधारित स्थिति जानकारी एकत्र करने के लिए है। Velociraptor के बारे में अधिक जानने के लिए, दस्तावेज़ीकरण पढ़ें: https://docs.velociraptor.app/ त्वरित आरंभ यदि आप देखना...

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ लिनक्स इंटीग्रिटी ड्रिफ्ट — "लिनक्स मर रहा है" — LSM सुरक्षा गारंटियों को बायपास करने वाले कर्नेल कोड पथों की व्यवस्थित खोज गेट कभी तोड़ा नहीं गया। इसे बस घूमकर पार किया गया। LID क्या है? लिनक्स...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

Imperius

Imperius Torne um rootkit LKM novamente visível. Isso envolve obter o endereço da função "moduleshow" de um rootkit, por exemplo o rootkit diamorphine, e usá-lo para chamá-la, adicionando-o de volta ao lsmod, tornando possível remover um rootkit LKM. Podemos obter o endereço da função em kernels...

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage root@kitploit: usage: java -jar cba-cli.ja...

sysflow

SysFlow: Cloud-native system telemetry pipeline This repository hosts the documentation and issue tracker for all SysFlow projects. Quick reference Documentation : the SysFlow Documentation Where to get help : the SysFlow Community Slack Where to file issues : the github issue tracker Source of...

CVE-2023-5612

Divulgazione dell'email pubblica nel feed RSS dei tag https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was...

ModTracer

ModTracer v1.0 ModTracer findet versteckte Linux-Kernel-Rootkits und macht sie wieder sichtbar. Eine weitere Möglichkeit, ein LKM sichtbar zu machen, ist der Imperius-Trick: https://github.com/MatheuZSecurity/Imperius Tritt der Rootkit-Forscher-Gruppe bei https://discord.gg/66N5ZQppU7...

mcp-shark

mcp-shark Scanner di sicurezza per strumenti di agenti AI — progettato per ingegneri della sicurezza e delle piattaforme che lavorano con MCP nell'IDE. Esegui una scansione statica locale scan sulle configurazioni IDE MCP e sui metadati degli strumenti incorporati: 41 regole incluse quelle per la...

AIOstack

Gli agenti AI sembrano sempre autorizzati. AIOStack ti dice quando non lo sono. Gli agenti AI agiscono per conto degli utenti. Usano credenziali reali, effettuano chiamate API reali, invocano strumenti, accedono alle API e toccano sistemi di produzione. La maggior parte degli strumenti di sicurez...

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

kube-hunter

Notice kube-hunter is not under active development anymore. If you're interested in scanning Kubernetes clusters for known vulnerabilities, we recommend using Trivy. Specifically, Trivy's Kubernetes misconfiguration scanning and KBOM vulnerability scanning. Learn more in the Trivy Docs. kube-hunt...

LambdaGuard

LambdaGuard AWS Lambda è una piattaforma di elaborazione serverless e basata su eventi fornita da Amazon Web Services. È un servizio di calcolo che esegue codice in risposta a eventi e gestisce automaticamente le risorse di calcolo richieste da tale codice. LambdaGuard è uno strumento di audit pe...

rakkess

rakkess Review Access - plugin kubectl per mostrare una matrice di accesso per le risorse del server Introduzione Ti sei mai chiesto quali diritti di accesso hai su un cluster Kubernetes fornito? Per risorse singole puoi usare kubectl auth can-i list deployments, ma magari stai cercando una visio...

badBANANA-threat-observatory

badBANANA // OSSERVATORIO DI MINACCE Un sistema di osservazione delle minacce incentrato sulle evidenze che mantiene semanticamente separati lo stato corrente della fonte, gli eventi di modifica sostanziale e la telemetria operativa di recupero. I dati mancanti, obsoleti, disabilitati o non...