7439 matches found
CVE-2026-23918-Passive-Audit
Script de auditoría CVE-2026-23918 alternativamente podrías simplemente hacer curl a los encabezados y echar un vistazo, pero aquí viene: Auditor de metadatos HTTP no invasivo para Apache HTTP Server Triage de exposición CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19. La...
Home-Network-Vulnerability-Assessment
Home-Network-Vulnerability-Assessment 对本地网络基础设施和家庭路由器进行安全审计和漏洞分析（CVE-2014-3566 和 CVE-2010-2333）。 家庭路由器安全审计与漏洞分析 项目描述 本项目记录了针对家庭本地网络的自主边界安全审计。目标是识别路由器网关上的开放端口，通过版本检测映射活跃服务，并利用 Nmap 脚本引擎（NSE）评估是否存在严重漏洞。 方法与工具 扫描工具： Nmap（Network Mapper）v7.98。 评估目标： 家庭路由器 / 网关（192.168.100.1）。 方法： 从 LAN 进行黑盒审计。 实验阶段与结...
keyguard
keyguard 扫描代码库、GCP 项目和 CI 流水线中暴露的 Google API 凭据——在它们被利用之前。 问题： Google 在已有的 API 密钥（Maps、Places 等）上回溯启用 了 Gemini API 访问，这些密钥本来设计为公开并嵌入客户端代码。当团队中有人在同一个 GCP 项目中启用 Gemini 时，那些本已公开的密钥会悄悄变成 Gemini 凭据——导致项目面临未经授权的 AI 使用风险，并可能产生超过 8 万美元的账单事故（背景）。 keyguard 的功能： keyguard scan —— 使用正则表达式 + 熵检测，在源文件和 Git...
dns-zone-audit
Auditoría de Zona DNS Una herramienta de seguridad ligera basada en Bash para probar configuraciones incorrectas de transferencia de zona DNS AXFR, asociada con CVE-1999-0532. Este script consulta los servidores de nombres autoritativos para un dominio e intenta transferencias de zona completas. ...
Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / galera / etc Multiple Vulnerabilities (crlsa-2022_1557)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221557 advisory. mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-2154 mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-2166 mysql: Inno...
Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / galera / etc Multiple Vulnerabilities (crlsa-2022_1556)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221556 advisory. mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-2154 mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-2166 mysql: Inno...
openclaw-technical-analysis
OpenClaw 技术分析 本仓库包含我对 OpenClaw AI 平台的深度技术审查与代码审计（特别聚焦于 2026 年 2 月 15 日及 2 月 25 日的构建版本）。 这些审查基于原始架构分析、GitHub 提交历史，以及其已发布功能与 SECURITY.md 和 VISION.md 之间的交叉对比。 视频审查 关于“玻璃大炮”效应、未经认证的网络暴露以及其 3,700 个“错误修复”背后的真相，请观看以下完整视频： 第一部分：原始审计（2 月 15 日构建） 在 YouTube 上观看第一部分 重点内容：会话劫持、真实网络暴露以及完全主机访问的危险。 第二部分：行动 vs...
Responsible-Alliance-Protocol
Teleological Bounding Protocol TBP v4.2.1 A policy-enforcement and cryptographic audit layer for autonomous AI agents. TBP blocks specific classes of agent action — autonomous financial transfers, industrial-control-system access, weapons-system integration — at the execution layer, outside the...
dscanner
dScanner 🔍 Herramienta automatizada de reconocimiento web para auditorías de seguridad Descripción dScanner consolida múltiples herramientas de reconocimiento en un solo comando para la fase inicial de pentesting web. Solo usar con sistemas autorizados!!!! 🚀 Instalación Dependencias requeridas:...
CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script
CYBERDUDEBIVASH Script de Auditoría de Agentes AI de ServiceNow v1.1 Enero 2026 Asegura tu Futuro con IA – Herramienta de Auditoría de Nivel Empresarial con Actualizaciones 2026 Este script audita Agentes AI de ServiceNow en busca de vulnerabilidades como CVE-2025-12420, brechas de gobernanza y...
buds-audit
buds-audit Versión 1.0.0 Herramienta de evaluación de seguridad Bluetooth para auriculares inalámbricos afectados por la cadena de vulnerabilidades del SDK Airoha CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702. Escanea dispositivos cercanos, identifica chipsets Airoha conocidos y vulnerables, y...
AA Discord Audit
aa-discord-audit Reconciliation audit for Alliance Auth's Discord integration. Compares the actual role assignments in the configured Discord guild against the state expressed in Alliance Auth Groups + State per user and closes the gap through which moderators can hand-assign AA-named roles to...
openclaw-hardening-check
Este script solo lee. No arregla nada y no garantiza que estés seguro. La salida verde significa solo que las comprobaciones listadas a continuación pasaron—y nada más. Comprobación de endurecimiento de OpenClaw openclaw-hardening-check.mjs es una pequeña revisión sin dependencias y fuera de líne...
Audit-BlackBox-Web-to-Root
Pentest Lab : Chaîne d'exploitation web et système Drupal to Root 免责声明 本项目是在受控且隔离的实验室环境 中为教育和学术目的而完成的。未针对任何真实基础设施。目标是通过理解攻击机制来学习如何保护系统。 工作环境与目标 场景描述 本项目的目标是进行一次黑盒审计 。这意味着分析在没有任何目标先验知识的情况下开始：未提供任何凭据、技术文档或源代码。 实验室架构 基础设施已在 VMware 上虚拟部署于一个隔离的私有网络（ 仅主机模式 ）中，以避免与外界交互。 攻击机（Kali Linux）： 192.168.78.131...
EUVD-2026-89438
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...
AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786469793)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786469793 advisory. - In MariaDB server version through 11.8.5, when server audit plugin is enabled with serverauditevents variable configured with...
PT-2026-103544
Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description An authenticated administrator can set a configurable security-policy setting to a value exceeding the maximum permitted limit. This allows the associated security control to be rendered...
AlmaLinux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1787212689)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787212689 advisory. - In MariaDB server version through 11.8.5, when server audit plugin is enabled with serverauditevents variable configured with QUERYDCL,...
Rocky Linux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1787212689)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787212689 advisory. - In MariaDB server version through 11.8.5, when server audit plugin is enabled with serverauditevents variable configured with QUERYDCL,...
