kin v0.5.42

The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...

so-crates v4.0.0

SO-CRATES Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus A standalone web application for analyzing pcap files, log files, and binary files. Features include Suricata network analysis, YARA binary scanning, Sigma rule detection for logs, and a single-page UI for browsing...

arkime v6.7.0

Arkime Arkime is a large scale, open-source network analysis and packet capture system. Arkime augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP...

CAPE-parsers v0.1.68

CAPE-parsers CAPE core and community parsers Configs structure root@kitploit: CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data goes here A...

ProtOSINT — Updated!

ProtOSINT ProtOSINT is a Python script that helps you investigate Proton Mail accounts. Version This is ProtOSINT v2. The first version has been around for a few years, but Proton's API changed and the old checks stopped working, so this is a rewrite that brings the tool back to life. Big thanks ...

rhabdomancer v0.10.0

rhabdomancer "The road to exploitable bugs is paved with unexploitable bugs." -- Mark Dowd Rhabdomancer is a blazing fast IDA headless plugin that locates calls to potentially insecure API functions in a binary file. Auditors can backtrace from these candidate points to find pathways allowing...

checkov v3.3.12

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

GO-2026-6213 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, zot, flux-notification-controller, nfpm, kots, nuclei, rancher-fleet, tfsec, grype, gitlab-runner, gitea, guac, pulumi, crossplane, scorecard, argo-workflows, k9s, kargo, gptscript, argo-cd, trivy, syft, xeol, grafana-alloy,...

drakvuf-sandbox v0.21.0

DRAKVUF Sandbox !WARNING Here be dragons 🐉. Maintaining your own sandbox is a difficult task and this project uses technology that is not user-friendly. Be prepared to brush up on your debugging skills as bugs may be reproducible only on your configuration. On the other hand, it's not purely an R...

Beyond End-To-End Success: Diagnosing Failures in Long-Horizon Security LLM Agents

Long-horizon security LLM agents must carry information and decisions across many dependent interactions, where later actions often depend on services, state, or access discovered much earlier. This makes final task success difficult to interpret: an agent may fail before it ever reaches the poin...

TGL-APT: Temporal Graph Learning with Graph Distillation for Efficient APT Investigation

Advanced Persistent Threat APT attacks pose a critical challenge to modern systems, as their stealthy, multi-stage nature renders conventional detection methods ineffective. While provenance graphs provide rich behavioral context for attack investigation, attack-relevant evidence is often sparse...

Joern 4.0.607

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

gosec v2.28.0

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

DEBIAN-CVE-2026-76881

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76590

creationtimestamp| type| source ---|---|--- 2026-08-19 22:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eehqrjmoult7l 2026-08-19 23:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtlahsuv2u 2026-08-20 00:00:38+00:00| seen|...

CVE-2026-16822

creationtimestamp| type| source ---|---|--- 2026-08-19 22:09:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqnrnc222e 2026-08-20 02:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti6oavrfc2u 2026-08-25 15:37:06+00:00| seen|...

joern v4.0.606

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CGA-9GJH-6538-Q498

Bulletin has no description...

CVE-2026-57826

creationtimestamp| type| source ---|---|--- 2026-08-19 19:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthhr3kpdw23...

zeek v8.2.1

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...