goblin

libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml root@kitploit: dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy,...

jdam

jdam - Structure-aware JSON fuzzing jdam is a Radamsa inspired tool for fuzzing arbitrary JSON objects in a structure-aware fashion, which ensures that fuzzing results will always be valid JSON. Many existing fuzzing tools will blindly alter the input and will often cause the result to be invalid...

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

openrasp

OpenRASP Introduction Unlike perimeter control solutions like WAF, OpenRASP directly integrates its protection engine into the application server by instrumentation. It can monitor various events including database queries, file operations and network requests etc. When an attack happens, WAF...

cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

pomerium

Pomerium is an identity and context-aware reverse proxy. Pomerium builds secure, clientless connections to internal web apps and other services without a corporate VPN. Pomerium is: Easier with clientless access. Faster by being tunnel-free and deployed where your apps and services are. Safer...

Occ

Segmentación de artículos prohibidos mediante modelado bicapa consciente de la oclusión ICME 2025 Implementación oficial en PyTorch de la segmentación de artículos prohibidos mediante modelado bicapa consciente de la oclusión. Enlace del artículo: IEEE, Arxiv. Cómo empezar Dependencias El código ...

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

NoiseHound

NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...

boundary

Boundary Qué es Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Sitio web: https://www.developer.hashicorp.com/boundary/ Foros: HashiCorp Discuss Documentación: https://developer.hashicorp.com/boundary/docs Tutoriales: Plataforma de aprendizaje de HashiCorp Boundary es un...

dwn

🥽 dwn dockerpwn - un gestor de herramientas de ataque para Docker introducción dwn es un "docker-compose para hackers". Utilizando un formato de "plan" YAML simple similar a docker-compose, se definen nombres de imágenes, versiones y asignaciones de volúmenes/puertos para configurar una herramien...

better_opts_attacks

¿Puedo tener su atención? Rompiendo defensas de inyección de prompts basadas en fine-tuning mediante ataques conscientes de la arquitectura Este repositorio contiene el código para ejecutar los ataques ASTRA y ASTRA++ que rompen SecAlign++, SecAlign, StruQ. Este repositorio también contiene algun...

teleport

Teleport ofrece conectividad, autenticación, controles de acceso y auditoría para la infraestructura. Podrías usar Teleport para: Configurar el inicio de sesión único SSO para toda tu infraestructura en la nube y local on-prem. Proteger el acceso a servidores, clústeres de Kubernetes, bases de...

tetragon

El nuevo componente Tetragon de Cilium permite una potente observabilidad de seguridad y aplicación en tiempo real basada en eBPF. Tetragon detecta y puede reaccionar ante eventos de seguridad significativos, como Eventos de ejecución de procesos Actividad de llamadas al sistema Actividad de E/S...

CVE-2026-5281

CVE-2026-5281 2026/06/27：Esta vulnerabilidad ha sido divulgada públicamente. Aunque los puntos de parche difieren, el enfoque general y la ruta de activación son completamente idénticos a los de mi PoC. Chromium commit commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD - 146.0.7680.71, tag:...

DeepGuard

DeepGuard 📖 Project Overview DeepGuard is an innovative secure code generation approach that enhances large language models' capability for secure code generation through multi-layer semantic aggregation techniques. This method effectively identifies and mitigates security vulnerabilities in code...

PoshC2_Old

PLEASE NOTE THIS REPO IS NOT BEING ACTIVELY UPDATED BUT IS STILL FULLY FUNCTIONAL - ALL FUTURE C2SERVER/IMPLANT WORK IS BEING CARRIED OUT ON THE PYTHON VERSION PoshC2 - https://github.com/nettitude/PoshC2/ PoshC2 PoshC2 is a proxy aware C2 framework that utilises Powershell and/or equivalent...

owasp-cstg

OWASP Cloud Security Testing Guide The Cloud Security Testing Guide CSTG is a comprehensive, vendor-neutral manual for testing the security of cloud environments. It is written for penetration testers, cloud and platform engineers, security architects, detection engineers, and auditors - anyone w...

opa

Open Policy Agent Open Policy Agent OPA는 전체 스택에 걸쳐 통합된 상황 인식형 정책 적용을 가능하게 하는 오픈 소스 범용 정책 엔진입니다. OPA는 Cloud Native Computing Foundation CNCF 랜드스케이프에서 졸업graduated 프로젝트가 된 것을 자랑스럽게 생각합니다. 자세한 내용은 CNCF 발표를 읽어보세요. OPA 시작하기 Rego Playground에서 첫 번째 Rego 정책을 작성하거나, 피드백과 지원을 위해 작업을 공유하는 데 사용하세요. 어디서부터 시작해야...

FencePost

FencePost Panel de control de firewall UFW para múltiples hosts. Se conecta a hosts Linux por SSH, analiza las reglas de firewall y los puertos en escucha, explica todo en lenguaje sencillo y señala brechas de seguridad. Características Visión general multi-host — ve el estado de UFW, las polític...