nray

nray 概述 Nray 是一款免费、平台与架构无关的端口及应用层扫描器。 nray 以分布式方式运行，以加速扫描并从不同视角执行扫描。 基于事件的结果允许在扫描过程中进一步处理信息，例如使用 jq 等工具。 如果您正在寻找用户文档，请查看项目主页。 有关开发和贡献 nray 的信息，请继续阅读。 构建 在 git 检出后，您可以通过调用 go build 来构建项目。 Nray 使用纯 Go 编写，并注意仅选择同样满足此要求的依赖项，因此标准的 Go 安装（加上 git）就足以在任何支持的平台上构建 nray——这意味着也没有 对 libpcap 等库的依赖。 使用 makefile...

WordPress-Long-Password-Denial-of-Service

WordPress 拒绝服务漏洞 CVE-2014-9016 免责声明 本脚本的内容仅供以符合道德的方式使用。 如果您没有设备所有者的书面许可，请勿使用本脚本。 如果您进行非法操作，您可能会被逮捕并受到法律的全面起诉。 Primus27 对任何滥用脚本的行为不承担任何责任——它们仅用于概念验证。 本应用程序仅应在获得相关责任人适当书面授权的情况下，在测试环境中使用。 漏洞利用 通过自动化长密码攻击，使 WordPress 服务下线 本脚本在应用层攻击 WordPress，利用以下弱点： 缺少最大密码长度限制 缺少额外的安全措施，例如验证码（CAPTCHA） 解决方案 将 WordPres...

HSTP

网络上的超简单文本协议 立即尝试：https://hstp.ai root@kitploit: npx hstp; 该协议旨在为超服务传输协议开发一种应用层抽象。 HSTP 是一种递归，正如 HSTP 的本质。该协议将自身实现为一个接口。在每个连接到互联网的设备上，都存在一个 HSTP 实例。因此无需采用。HSTP 已经运行在互联网之上。我们现在才刚刚实现了在异构网络上通过协议解释协议。所以不要将其与 web2、web3 或类似事物进行比较。 摘要 HSTP 是用于异构网络的应用表示接口。 HSTP...

PoW-Shield

描述 PoW Shield 通过充当代理服务器，在后端服务和最终用户之间利用工作量证明，为 OSI 应用层提供 DDoS 防护。该项目旨在为 Google 的 ReCaptcha 等常见反 DDoS 方法提供一种替代方案，这些方法往往令人困扰。访问受 PoW Shield 保护的网络服务从未如此简单：只需访问 URL，您的浏览器将自动为您完成其余验证。 PoW Shield 旨在通过单个 Web 应用 / Docker 镜像提供以下服务： 工作量证明认证 速率限制和 IP 黑名单 Web 应用防火墙 （新版）领英上的文章 在 Pentester Academy TV 上展示 Medium...

shadowd

Logo Shadow Daemon 是一个 Web 应用防火墙 ，它在应用层拦截请求。 该仓库包含 Shadow Daemon 的主要组件，负责请求的分析和存储。 文档 完整文档请参考 shadowd.zecure.org。 安装 准备 使用 cmake 来配置和准备项目。建议为此创建一个单独的目录。 典型的安装过程如下所示： root@kitploit: mkdir build cd build cmake -DCMAKEINSTALLPREFIX:PATH=/usr -DCMAKEBUILDTYPE=Release .. 编译 如果 cmake 成功运行，它将生成一个...

fingerprintx

功能 • 安装 • 使用 • 运行 fingerprintx • 作为库使用 • 为何不用 Nmap？ • 说明 • 致谢 fingerprintx 是一款类似于 httpx 的工具，但额外支持对 RDP、SSH、MySQL、PostgreSQL、Kafka 等服务的指纹识别。fingerprintx 可与 Naabu 等端口扫描器配合使用，对端口扫描过程中发现的端口集进行指纹识别。例如，工程师可能希望扫描某个 IP 范围，然后快速识别所有已发现端口上运行的服务。 功能 快速识别暴露的服务 应用层服务发现 与其他命令行工具配合良好 自动收集已识别服务的元数据...

CVE-2026-45766 Suricata nfs: unbounded stateful structures can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-71360 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

Astra Linux – Vulnerability in vsftpd

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers that implement different protocols but use compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker, who has access to the victim’s traffic at the TCP/IP layer, can redirect...

PT-2026-79499

Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...

CVE-2026-6540

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

EUVD-2026-51153

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

CVE-2026-6540 L7 policy bypass via unnormalized HTTP path matching

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

CVE-2026-6540

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

Linux Distros Unpatched Vulnerability : CVE-2026-11703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session...

EUVD-2026-39576

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

DEBIAN-CVE-2026-11703

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

UBUNTU-CVE-2026-11703

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

CVE-2026-11703

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

Defense in depth for autonomous AI agents

Designing Secure Autonomous AI Agents with Defense in Depth AI agents are moving beyond assistance and into action. Instead of generating content, they invoke tools, modify data, trigger workflows, and operate across systems with increasing autonomy. This shift changes the security problem...