15871 matches found
cve-2024-36401-security-simulator
CVE-2024-36401 Security Incident Analysis & Detection Simulator A Python-based educational simulator that models a fictional network-security incident inspired by the real-world exploitation of CVE-2024-36401. The project demonstrates how vulnerability management, network segmentation, least...
DAMM
DAMM An open source memory analysis tool built on top of Volatility. It is meant as a proving ground for interesting new techniques to be made available to the community. These techniques are an attempt to speed up the investigation process through data reduction and codifying some expert...
tirreno
tirreno tirreno is open security analytics. tirreno tir.ΛrΙ.no helps understand, monitor, and protect your applications from cyber threats, account takeovers, bots, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised...
CVE-2026-104751
The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it...
aquatone
AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...
Malicious code in @mntv-analysis/ui-components (npm)
npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 50.1.1 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...
Malicious code in @mntv-analysis/ui (npm)
npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 99.1.1 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...
Malicious code in @mntv-analysis/workspaces-components (npm)
npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 65.11.3 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', whic...
NuReaper
NuReaper β NuGet Package Security Scanner β οΈ Work in Progress β The project is actively developed. Core scanning engine is rebulding NuReaper is a .NET 8 backend API that automatically analyzes the security of NuGet packages. You provide a link to any NuGet package, and the system recursively...
EUVD-2026-100877
The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it...
CitrixNetscalerAnalysis
Citrix Analysis Notebook A jupyter notebook to aid in automating some of the forensic analysis related to Citrix Netscaler hosts compromised via CVE-2019-19781. For help retrieving artifacts to examine see this Citrix triage script. All notes/suggestions are welcome. Feel free to submit pull...
CTWall
CTWall - ChainThreatWall GitHub release --- As more teams move to virtualized development environments to reduce software supply-chain risk, one challenge remains: malicious dependencies can still slip through and reach production. CTWall ChainThreatWall platform helps Security, DevOps, and Produ...
IoT-PT-v1
π οΈ IoT-PT OS v1 Internet of Things Penetration Testing OS - Version 1 π¦ What is IoT-PT OS v1? IoT-PT OS v1 is a penetration testing virtual machine designed specifically for IoT security assessments. It includes pre-configured tools, scripts, and environments tailored for firmware analysis,...
cve-2021-21551-PoC
cve-2021-21551-PoC This repo contain a PoC I have done when blind analysis the dbutil23.sys driver for vulnerability. This was created by personal analysis without looking at writeups or even know which CVE exist in this driver. All the knowledge I have is that this driver is vulnerable in some w...
AndroBugs_Framework
AndroBugs Framework AndroBugs Framework is an Android vulnerability analysis system that helps developers or hackers find potential security vulnerabilities in Android applications. No splendid GUI interface, but the most efficient less than 2 minutes per scan in average and more accurate. Versio...
PT-2026-113656
The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it...
gradle-static-analysis-plugin
DEPRECATED Gradle static analysis plugin β οΈ A fork of this project is maintained at https://github.com/GradleUp/static-analysis-plugin/ Please migrate by using com.gradleup.static-analysis plugin id instead. A Gradle plugin to easily apply the same setup of static analysis tools across different...
Codeguard-copilot
CodeGuard Copilot β Intelligent Security Ecosystem Your AI-Powered Security Guardian β Now Connected to Live Attacker Intelligence Features β’ Architecture β’ Raven Integration β’ Installation β’ Roadmap β’ Contributing What is CodeGuard Copilot? CodeGuard Copilot catches security vulnerabilities as y...
DNS-Poisoning-Triage-Lab
DNS and ARP Traffic Triage Lab An educational packet-analysis and resolver-hardening exercise completed on an Arch Linux workstation. Scope: This repository is a learning project. The included capture is useful for practicing DNS and ARP inspection, but it does not by itself prove a live...
Playbooks
Table of Content TOC IR Playbooks This repository contains all the Incident Response Playbooks and Workflows of Company's SOC. Each folder contains a Playbook that is broken down into 6 section as per NIST - 800.61 r2 1- Preparation This section should include the following informations List of A...