267 matches found
zap-scripts
zap-scripts Scripts de Zed Attack Proxy para encontrar CVEs y Secretos. Construcción Este proyecto usa Gradle para construir el add-on de ZAP, simplemente ejecute: ./gradlew build en el directorio principal del proyecto, el add-on se colocará en el directorio build/zapAddOn/bin/. Uso La forma más...
seccubus
Informazioni su Seccubus Seccubus automatizza scans di vulnerabilità regolari con vari strumenti e aiuta i professionisti della sicurezza nell'analisi rapida del suo output, sia al primo scan che a scans successivi. Con il delta reporting su scans ripetuti, i risultati devono essere giudicati sol...
purpleteam-s2-containers
purpleteam Stage Two containers Stage Two containers of purpleteam These containers are started dynamically based on Build User config Job input supplied to the purpleteam CLI, specifically the number of testSessions you define. The following configurations are relevant if you are intending on...
faraday_zap
Its requiered have JDK installed. For ubuntu version you can use sudo apt install default-jdk Set development environment clone zap-extensions repo clone https://github.com/zaproxy/zap-extensions/ add faraday folder to zap-extensions/addOns add "faraday" to settings.gradle.kts Build ./gradlew...
BurpImportSitemap
Import To Sitemap Extension Import To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap. It also includes a contextual menu to send request/response items from any tab to the sitemap. License Released as open source by NCC Group Plc -...
readable-thrift
Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...
Open-Worldwide-Application-Security-Project-OWASP-
Open-Worldwide-Application-Security-Project-OWASP- Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution CVE-2012-1823...
Linux Distros Unpatched Vulnerability : CVE-2026-98310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk wal...
DVWA-ZAP-PENTEST
DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...
CVE-2026-98310
In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which needs...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Race conditions in scosockconnect have been fixed. scosockconnect checks skstate and sktype without holding the socket lock. Two concurrent connect system calls on the same socket can both pass the check and enter...
zaproxy w2026-09-30
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
PT-2026-93628
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the zap huge pmd folio function fails to propagate the pmd dirty bit to the folio during the zap process. In MAP SHARED tmpfs mappings, a read fault installs a...
Astra Linux – Vulnerability in Zeromq3
There is a flaw in the zeromq server in versions before 4.3.3, located in src/decoderallocators.hpp. The decoder’s static allocator could have its size changed, but the buffer remains unchanged since it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zero...
Astra Linux – Vulnerability in Zeromq3
A uncontrolled resource consumption memory leak flaw was discovered in ZeroMQ’s src/xpub.cpp in versions prior to 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if CURVE/ZAP authentication is disabled on the server, resulting i...
sakuda
sakuda sakuda is short for 「さくっとDAST」 "DAST, quickly...
mzap v2.2.1
mzap mzap is a Crystal CLI for multi-target ZAP scanning. It dispatches targets across one or more ZAP API hosts, supports optional wait mode, and can export reports. Features Scan commands: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan API definition import for openapi, soap, graphql,...
Vulnerabilty-Assessment-Detection-Lab
Vulnerability Assessment & Detection Lab End-to-end vulnerabi...
zaproxy w2026-09-03
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...