Johnny-You-Are-Fired

Johnny-You-Are-Fired Артефакты для публикации USENIX | Полная статья здесь Аннотация OpenPGP и S/MIME — два основных стандарта для шифрования и цифровой подписи электронных писем. Цифровые подписи должны гарантировать подлинность и целостность сообщений. В этой работе мы демонстрируем практически...

CyberStrike

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी Первый open-source AI-агент, созданный для наступательной безопасности...

oneiromancer

oneiromancer «Бо́льшая часть ошибок в разработке программного обеспечения возникает из-за того, что программисты не до конца понимают все возможные состояния, в которых может выполняться их код». — Джон Кармак «Может ли он запустить Doom?» — https://canitrundoom.org/...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

fuzzowski

Fuzzowski root@kitploit: █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas Идея в том, чтобы быть тем сетевым протокольным фаззером, которым мы захотим пользоваться. Цель этого инструмента ...

pentest-guide

Руководство по тестированию на проникновение на основе OWASP + Дополнения Это руководство предназначено для тестировщиков на проникновение, которые ищут подходящие тестовые примеры, необходимые в ходе проекта тестирования на проникновение. Я переработал OWASP Testing Guide v4 с моей точки зрения,...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

AZL-98487 CVE-2026-73276 affecting package erlang 26.2.5.21-4

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

appsec-forge

appsec-forge Erstellt für Entwickler, DevOps, AppSec, DevSecOps und Sicherheitsingenieure. Eine repository-zentrierte Wissensdatenbank für Sicherheit, die sichere Entwicklung, Anwendungssicherheit, Infrastruktur, Software-Lieferkette, KI und DevSecOps abdeckt. Studiere Sicherheitsprobleme so, wie...

bug-bounty-standards

Cos'è Questo Repository? Questo repository è un elenco di situazioni che si verificano nei programmi di bug bounty e di come dovrebbero essere gestite. Molte di queste sono attualmente gestite caso per caso, il che porta a molta incertezza e frustrazione per hacker, proprietari dei programmi e...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

Kibana 8.x < 8.19.20 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Denial of Service (ESA-2026-136)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, 9.0.x prior to 9.3.5, or 9.4.x prior to 9.4.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-136 advisory. - Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input...

CVE-2026-49096

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

CVE-2026-49096 Uncaught Exception in Kibana Cases Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

CVE-2026-49096

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

CVE-2026-49096 Uncaught Exception in Kibana Cases Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

CVE-2026-49096

CVE-2026-49096 affects Kibana Cases. The issue is an Uncaught Exception (CWE-248) triggered by malformed link syntax stored in a case comment and later rendered, causing a denial of service where the affected case becomes inaccessible to all users until the comment is removed. Affected products/c...

Kibana 8.19.20, 9.3.5, 9.4.2 Security Update (ESA-2026-136)

Uncaught Exception in Kibana Cases Leading to Denial of Service Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for...

PT-2026-71750

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...