pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

tmux

Welcome to tmux! tmux is a terminal multiplexer: it enables a number of terminals to be created, accessed, and controlled from a single screen. tmux may be detached from a screen and continue running in the background, then later reattached. This release runs on OpenBSD, FreeBSD, NetBSD, Linux,...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

amass

Proyecto OWASP Amass El Proyecto OWASP Amass realiza mapeo de redes de superficies de ataque y descubrimiento de activos externos utilizando técnicas de recopilación de información de fuentes abiertas y reconocimiento activo. Instalación Puedes encontrar instrucciones adicionales de instalación y...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: kube-bench-fips, argo-workflows, spicedb, temporal-server-fips, argo-workflows-fips, kine, kube-bench, k3s, trillian, step, trillian-fips, falcosidekick-fips, wavefront-collector-for-kubernetes, amass, src, caddy-fips, kots, caddy, step-ca, temporal-server, ferretdb...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: caddy, kine, temporal-server, kube-bench, argo-workflows, trillian, ferretdb, spicedb, step, kots, step-ca, k3s, src, amass...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kine, gitness, sbomqs, aactl, pvc-autoresizer, git-lfs, conftest, postgres-operator, aws-flb-kinesis, bom, crossplane-provider-aws-iam, rancher-loglevel, kubeflow-pipelines, kserve-modelmesh-serving, kubeflow-katib, mongodb-kubernetes-operator, thanos-operator,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: pgwatch, falcosidekick, gitlab-cng, certificate-transparency-fips, steampipe, openbao-fips, kube-bench, opentelemetry-collector-contrib-fips, k3s, kubeflow-pipelines, trillian, falcosidekick-fips, step-issuer, chainloop-control-plane, cerbos, rke2-runtime, amass,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux, gitness, aactl, cilium, bom, aws-application-networking-k8s, thanos-operator, docker-cli, nri-apache, rancher-system-upgrade-controller, flannel, kapp, smokescreen, step, istio, tkn, cert-exporter, redpanda, oauth2-proxy, mongo-tools, kargo, tetragon,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: hydra, envoy-gateway, kine, sops, terragrunt, aactl, cerbos, argo-workflows, nuclei, wolfictl, sftpgo, fulcio, witness, nri-mysql, kyverno-policy-reporter, kubeflow-pipelines, sqlexporter, crossplane-provider-sql, spicedb, tailscale, seaweedfs, juicefs,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: mockgen, incert, pvc-autoresizer, conftest, bom, yunikorn-k8shim, cluster-api-helm-controller, kratos, rancher-loglevel, thanos-operator, kubeflow-katib, mongodb-kubernetes-operator, controller-gen, terraform-provider-azuread, mesosphere-vsphere-csi,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: bom, thanos-operator, docker-cli, flannel, kapp, smokescreen, istio, cert-exporter, dagdotdev, traefik, oauth2-proxy, mongo-tools, falcosidekick, boring-registry, kiali, ini-file, conjur-cli, dynamic-localpv-provisioner, kube-state-metrics, octo-sts, yace, podinfo,...