perl-CryptX

NOM CryptX - Boîte à outils cryptographique SYNOPSIS CryptX est le point d'entrée de la distribution. Dans le code normal, chargez l'un des modules concrets listés ci-dessous. root@kitploit: one-shot hashing use Crypt::Digest qwdigestdatahex; my $sha256 = digestdatahex'SHA256', 'hello world';...

creadur-rat-gradle

Apache RAT Release Audit Tool Gradle プラグイン このプラグインは、ライセンスに焦点を当てたリリース監査ツールである Apache RAT を実行できるようにします。 インストール build.gradle.kts ファイル内で: root@kitploit: plugins id"org.nosphere.apache.rat" version "0.8.1" 使用方法 このプラグインは、build.gradle.kts ファイルで設定できる rat というタスクを登録します: Kotlin DSL root@kitploit: tasks.rat ...

EUVD-2026-83275

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

CVE-2026-93854

In OpenStack Blazar before 17.0.1 , the V2 lease API fails to enforce object-level authorization on update and delete operations due to a parameter name mismatch : the authorize() wrapper looks up the lease under the keyword "lease_id" while the controller methods name the parameter "id" (deliver...

CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

snowpick

snowpick est un scanner d'exposition ServiceNow qui détecte les ACL de widgets mal configurés, les contrôles d'accès à l'API REST et l'exposition de données sans authentification. ServiceNow expose des données via deux surfaces publiques courantes : les widgets Service Portal et l'API REST Table...

xepor

Xepor Xepor تُنطق /ˈzɛfə/، زيفر هو إطار عمل لتوجيه الويب لمهندسي الهندسة العكسية وباحثي الأمن. يوفر واجهة برمجة تطبيقات شبيهة بـ Flask للمخترقين لاعتراض وتعديل طلبات HTTP و/أو استجابات HTTP بأسلوب برمجة سهل القراءة. هذا المشروع مخصص للاستخدام مع mitmproxy. يكتب المستخدمون نصوصًا باستخدام xepor، ث...

CVE-2022-3602

Détection pour CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6 Détecte lorsque l'en-tête HTTP Server indique que la version d'OpenSSL est vulnérable à CVE-2022-3602 c'est-à-dire v3.0.0 à v3.0.6 inclus. Détecte les tentatives d'exploitation dans TLS v1.2. Références :...

ghidrecomp

Ghidrecomp - Command Line Ghidra Decompiler About This Python command line tool decompiles all functions of a binary and writes them to a directory in separate C files: root@kitploit: flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output...

ghidrecomp

Ghidrecomp - Décompilateur Ghidra en ligne de commande À propos Cet outil Python en ligne de commande décompile toutes les fonctions d'un binaire et les écrit dans un répertoire sous forme de fichiers C séparés :mermaid flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Proje...

cybersecurity-projects

Paysage de la recherche Domaines de recherche...

CVE-2026-93852

OpenStack Blazar before 17.0.1 has a broken authorization flaw in the V2 lease listing endpoint (GET /v2/leases). The endpoint returns leases for every project without enforcing project scoping or an administrator-only policy, allowing any authenticated user with REST API access to enumerate leas...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

EUVD-2026-83273

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

misp-objects

misp-objects Объекты MISP используются в системе MISP и могут применяться другими инструментами обмена информацией. Объекты MISP дополняют атрибуты MISP, позволяя создавать расширенные комбинации атрибутов. Создание этих объектов и связанных с ними атрибутов основано на реальных сценариях...

Panoptic

Panoptic Panoptic est un outil open source de test d'intrusion qui automatise la recherche et la récupération de fichiers journaux et de configuration courants via des vulnérabilités de traversée de chemin. Fonctionnalités Analyse asynchrone concurrente avec un pool de travailleurs configurable...

shodan-dorks

Shodan dorks الوصف: يقدم مستودع GitHub هذا مجموعة من استعلامات البحث، المعروفة باسم "dorks"، لـ Shodan، وهي أداة قوية تُستخدم للبحث عن الأجهزة المتصلة بالإنترنت. تم تصميم هذه الاستعلامات لمساعدة باحثي الأمن على اكتشاف الثغرات الأمنية المحتملة ومشكلات التكوين في أنواع مختلفة من الأجهزة مثل كاميرات...