gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

Judge-Jury-and-Executable

심판, 배심원, 그리고 실행 파일 위협 헌팅 포렌식 도구 기능: 즉시 마운트된 파일 시스템에서 위협 스캔 또는 사고 발생 전 시스템 베이스라인을 수집하여 추가 위협 헌팅 능력 확보 사고 전, 중, 후에 사용 가능 하나에서 여러 워크스테이션까지 MFT를 스캔하여 파일 권한, 파일 잠금, OS 파일 보호/숨김/그림자 우회 파일당 최대 51개의 다양한 속성 수집 스캔 결과는 SQL 테이블에 저장되어 나중에 검색, 여러 스캔 및/또는 여러 시스템에 걸친 결과 집계, 과거 또는 회고적 분석 가능 SQL의 힘을 활용하여 파일 시스템 검색...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

the-bastion

🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

pycdc

Decompyle++ A Python Byte-code Disassembler/Decompiler Decompyle++ aims to translate compiled Python byte-code back into valid and human-readable Python source code. While other projects have achieved this with varied success, Decompyle++ is unique in that it seeks to support byte-code from any...

Oracle WebLogic Server - Remote Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. id: CVE-2019-2725 info: name: Oracle WebLogic...

Microsoft SharePoint Server - Remote Code Execution (ToolShell)

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. This vulnerability is part of the ToolShell exploit chain and when combined with CVE-2025-53771 authentication bypass, enables unauthenticated remote code...

sigma-ai

AgentShield Sigma 규칙 이 저장소는 무엇인가요? 이 저장소는 AI 에이전트가 공격받거나 조작될 때 이를 식별하는 데 도움이 되는 탐지 규칙을 포함하고 있습니다. 일종의 "위협 시그니처" 라이브러리로 생각하면 됩니다. 각 규칙은 에이전트의 로그 데이터와 일치할 때 의심스러운 무언가가 발생하고 있음을 알리는 패턴을 설명합니다. AgentShield는 AI 에이전트를 위한 오픈 소스 보안 계층입니다. 실시간으로 에이전트 동작을 모니터링하고 이러한 Sigma 규칙을 사용하여 프롬프트 인젝션, 데이터 도난, 도구 중독, ...

SecFlow

SecFlow Полностью автоматизированный конвейер анализа многокомпонентных угроз Передайте любой файл, URL, IP-адрес, домен или изображение. SecFlow направляет их через специализированные анализаторы, анализирует результаты с помощью ИИ и автоматически формирует профессиональный отчёт по безопасност...

[SECURITY] [DLA 4752-1] nvidia-graphics-drivers new upstream security update

Debian LTS Advisory DLA-4752-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost August 24, 2026 https://wiki.debian.org/LTS Package : nvidia-graphics-drivers Version : 535.309.01-0+deb11u1 CVE ID : CVE-2022-21813 CVE-2022-21814 CVE-2022-28181 CVE-2022-28183...

[SECURITY] [DLA 4753-1] nvidia-graphics-drivers new upstream security update

Debian LTS Advisory DLA-4753-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost August 24, 2026 https://wiki.debian.org/LTS Package : nvidia-graphics-drivers Version : 535.309.01-0+deb12u1 CVE ID : CVE-2025-23280 CVE-2025-23282 CVE-2025-23300 CVE-2025-23330...

code-shield

protocol-remediator C/C++ protocol・platformコードの脆弱性findingを再現可能な証拠として正規化し、 候補パッチを隔離されたコピーで検証するMVPである。code-shieldは名前衝突のリスクが 確認された作業名であるため、公開packageとCLIには中立的な内部名を使用した。 現在の実装の中心はパッチ生成モデルではなく、次の検証クローズドループである。 root@kitploit: sanitizer 또는 SARIF - Finding + EvidenceBundle - source context -...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

cloud_enum

cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...

rdesktop

IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...

oss-bounty-program

Программа вознаграждений ProjectDiscovery OSS Цель Программа вознаграждений ProjectDiscovery OSS существует, чтобы демократизировать безопасность, вознаграждая значимый вклад мирового сообщества. Наши инструменты используются исследователями, защитниками и разработчиками по всему миру. Эта...

BIT-DOCKER-CLI-2026-17106 Tar extraction in moby/go-archive can write outside the destination directory via link following

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...