manuka

Manuka 説明 Manukaは、脅威アクターによる偵察活動を監視し、ブルーチーム向けの実用的なインテリジェンスを生成するオープンソースインテリジェンス（OSINT）ハニーポットです。ソーシャルメディアプロフィールや漏洩した認証情報など、偽装されたOSINTソースで構成されるシミュレート環境を作成し、攻撃者の関心の兆候を追跡します。これはMITREのPRE-ATT&CKフレームワークに密接に対応しています。Manukaはブルーチームに攻撃前の偵察フェーズにおける追加の可視性を提供し、防御側に早期警戒信号を生成します。...

python-ecdsa

Pure-Python ECDSA and ECDH 这是一个易于使用的 ECC（椭圆曲线密码学）实现，支持 ECDSA（椭圆曲线数字签名算法）、EdDSA（爱德华曲线数字签名算法）和 ECDH（椭圆曲线 Diffie-Hellman），完全用纯 Python 实现，并以 MIT 许可证发布。使用此库，您可以快速创建密钥对（签名密钥和验证密钥）、对消息签名并验证签名。您还可以基于交换的公钥协商出共享密钥。密钥和签名都非常短，易于处理并集成到其他协议中。 注意：此库不应在生产环境中使用，详情请参阅Security。 特性 此库为五种流行的 NIST“Suite B”GFp（ 素数域...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

yj_nearbyglasses

yjnearbyglasses 近くにあるスマートグラスを検出して警告しようとする試み。 ⚠ 警告! ⚠ nearby-glasses-alert.pages.dev は私のプロジェクトとは無関係 です。Play Store や App Store にある多くのアプリは Nearby Glasses と見た目が似ていたり、同じような名前だったりします。それらは名前を乗っ取り、そこから手っ取り早く利益を得ようとしているようです。AGPL ライセンスに従っておらず、何も提供していません。私はこれらを推奨しません。 ⚠ 警告! ⚠...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 允许注入警告消息。 发现日期：2022年2月15日 受影响版本： 9.4 POC 利用代码： SASLogon/csrf 有一个名为 "target" 的参数 该参数会影响用户即将打开的 URL 的警告消息（但由于来源未知，系统会将其拦截）。 通过更改该参数，攻击者可以写入一条长长的虚假声明，从而影响不知情的用户。...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

HoneyWire

HoneyWire 📋 目录 概述 演示 通用事件标准 功能特性 架构 快速入门指南 安全说明 技术栈 路线图与开发 版本管理与 API 参考 概述 HoneyWire 是一个轻量级的分布式高信号安全早期预警系统构建器，专为内网设计。它利用其架构和用户体验，使构建新的 Cyber Canary 服务器或在现有服务器上部署 HoneyWires 变得极其简单。通过使用欺骗技术，它取代了传统 SIEM 的"放大镜"方法——传统 SIEM 通过监视合法流量来让分析师淹没在误报中，而 HoneyWire 采用高保真绊网（Tripwire）模型。...

CVE-2026-98073

In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dying netns in devchangenetnamespace. syzbot reported the warning in cfg80211pernetexit. 0 The repro does the following: 1. create two device in root netns and non-root netns 2. assign the sam...

CVE-2026-98151

The Linux kernel contains a vulnerability in the BPF subsystem where a REG INVARIANTS VIOLATION occurs during speculative pointer arithmetic. The root cause is an inconsistency between var_off and the 32-bit range (r32) during the execution of sanitize_ptr_alu(). Specifically, the r32 register is...

CVE-2026-98117

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct cachefilesxattr so that it can display the first 8 bytes. However, the dat...

CVE-2026-98117

The Linux kernel contains a vulnerability in the cachefiles component where the trace_cachefiles_coherency() function incorrectly handles coherency data in struct cachefiles_xattr. Specifically, it passes a pointer to a __be64 over data of variable length (which could be 0 bytes), potentially lea...

EUVD-2026-86948

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct cachefilesxattr so that it can display the first 8 bytes. However, the dat...

EUVD-2026-86910

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroupaccountsnapshot BUG When running btrfs/252 with quota enabled through MKFSOPTIONS="-O quota", it has a high chance to trigger the following kernel warning and flips the fs RO:...

lazyrecon

root@kitploit: / \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

CVE-2026-98117

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct cachefilesxattr so that it can display the first 8 bytes. However, the dat...

CVE-2026-97443

In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in unregisterftracefunction perfftracefunctionunregister unconditionally calls unregisterftracefunction without checking whether the ftraceops was ever successfully registered. This triggers a WARNON in...

EUVD-2026-86077

In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning can appear: WARNING: CPU: 1 PID: 139 at drivers/base/core.c:1497 devicelinksnodriver+0xcc/0xfc ... Cal...

CVE-2026-97479

The Linux kernel driver core contains an issue where a warning is triggered during device removal when a consumer is removed while its supplier is in the process of unbinding. This occurs because the supplier's link status is set to DL_DEV_UNBINDING , which the system incorrectly flags. This was ...

CVE-2026-97479 driver core: Avoid warning when removing a device while its supplier is unbinding

In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning can appear: WARNING: CPU: 1 PID: 139 at drivers/base/core.c:1497 devicelinksnodriver+0xcc/0xfc ... Cal...