wprecon

WPRecon A powerful, template-driven WordPress reconnaissance and vulnerability scanning tool Features • Installation • Usage • Architecture • Templates 📋 Overview WPRecon is a modern WordPress security reconnaissance tool built with Go that helps security engineers identify vulnerabilities,...

Nuclei-Template-CVE-2023-42793.yaml

This repository does not have a README...

AutoPiff

AutoPiff Automated Patch Intelligence and Finding Framework A semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches. AutoPiff uses conservative YAML rules to identify security-relevant code changes with high precision and explainability. Overview AutoPiff...

CVE-2024-37084-Poc

CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc about CVE-2024-37084 How to use : root@kitploit: py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -...

CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a...

holos

Docker compose 的 KVM 版本。在一个 YAML 文件中定义多 VM 堆栈。没有 libvirt，没有 XML，没有分布式控制平面。 网站和文档：https://zeroecco.github.io/holos/ 原语是 VM，而不是容器。每个工作负载实例都有自己的内核边界、qcow2 覆盖层、cloud-init 种子和生成的 SSH 访问。 快速开始 需要 Linux + /dev/kvm。macOS 构建可以运行离线命令，如 validate、import、images 和 pull，但 up 和 run 需要 KVM 主机。 一个一次性 VM，无需 compose...

CVE-2026-84375

js-yaml , a widely used JavaScript YAML parser, is vulnerable to a CPU exhaustion issue in its merge-key (<

Query-Hub

CQL-Hub | CrowdStrike SIEM & LogScale Queries Welcome to the CQL-Hub Backend Repository This repository powers cql-hub.com: A free, community-driven hub for CrowdStrike Falcon SIEM queries. All queries stored here are automatically published and made visible on the CQL-Hub website, making it easi...

authz0

Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

nuvola

nuvola nuvola con la n minúscula es una herramienta para volcar y realizar análisis de seguridad automáticos y manuales sobre configuraciones y servicios de entornos AWS, utilizando reglas predefinidas, extensibles y personalizadas creadas con una sintaxis YAML simple. La idea general detrás de...

aerleon

Aerleon...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation...

machinae

Machinae Colector de Inteligencia de Seguridad Machinae es una herramienta para recolectar inteligencia de sitios/feeds públicos sobre varios tipos de datos relacionados con la seguridad: direcciones IP, nombres de dominio, URLs, direcciones de correo electrónico, hashes de archivos y huellas...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

scodescanner

SCodeScanner SCodeScanner 代表源代码扫描器，用户可以通过它扫描源代码以发现关键漏洞。该扫描器的主要目标是在代码发布到生产环境之前，发现源代码中的漏洞。 发布新版本和公告的网站：https://scodescanner.info/ 特性 1. 支持 PHP 语言 2. 支持 YAML 语言 3. 将结果传递到如 Jira 和 Slack 等 bug 跟踪服务（将文件一次性发送给群组中的多个人）。 4. 以 JSON 格式输出结果，可轻松用于其他程序。 5. 基于规则工作。我们只需创建一些规则，如果目标规则不在 php/yaml 目录中。 6. 可扫描高级模式的规则...

threagile

Threagile Agile Threat Modeling Toolkit Threagile see threagile.io for more details is an open-source toolkit for agile threat modeling: It allows to model an architecture with its assets in an agile fashion as a YAML file directly inside the IDE. Upon execution of the Threagile toolkit all...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

DeepZero

Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...

OFFAT

OWASP OFFAT OWASP OFFAT OFFensive Api Tester is created to automatically test API for common vulnerabilities after generating tests from openapi specification file. It provides feature to automatically fuzz inputs and use user provided inputs during tests specified via YAML config file. Demo Note...