drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

Nemesis

概述 Nemesis 是一个开源的中心化数据处理平台，用于摄取、丰富并支持（人类与 AI 协同）分析在 offensive 安全评估中收集的文件。 Nemesis 2.0 基于 Docker 构建，并深度集成了 Dapr。我们的目标是让 Nemesis 成为一个中心化文件处理平台，充当“进攻版的 VirusTotal”。 注：之前的 Nemesis 1.0.1 代码库已作为分支 保留 安装 / 部署 请遵循 快速入门指南。 使用 请参阅 Nemesis 使用指南。 其他信息 博客文章： 演讲： 致谢 Nemesis...

SecuSphere

SecuSphere 您的全方位 DevSecOps 解决方案 欢迎使用 SecuSphere，满足您所有 DevSecOps 需求的一站式解决方案。我们的集中式平台经过专业设计，可管理和优化您的漏洞管理、CI/CD 流水线集成、安全评估和 DevSecOps 实践。 SecuSphere 是一个全面的 DevSecOps 平台，旨在简化并增强您的组织在整个软件开发生命周期中的安全态势。我们的平台充当漏洞管理、安全评估、CI/CD 流水线集成以及培育 DevSecOps 实践与文化的集中枢纽。 集中化漏洞管理 SecuSphere...

CFC

集中式防火墙控制脚本 集中式防火墙控制提供了一种集中管理运行 iptables 的多台服务器或负载均衡器防火墙的方法。通过这种方式，你可以使用一条命令在多台服务器上快速允许/阻止/删除/搜索滥用地址段等。它通过 SSH 访问这些服务器。 支持 IPv4 和 IPv6。 已在 Debian 6.x / 7.x / 8.x / 9.x 上测试，但应适用于任何发行版。 前置条件 要使用 IPv6 的 'precheck'、'protected' 和 'findip' 功能，需要安装 'netaddr' Python 模块。IPv4 不需要该模块，因为它使用 IP 二进制形式的前缀匹配。...

vallumd

vallumd 本程序允许您集中和分发 IP 黑名单。 如果您在互联网上维护一个服务器，很有可能会遇到一两次暴力破解攻击。没关系，只需安装 fail2ban 即可搞定。 但是，如果您运行着多个服务器，每个服务器都有各自的 fail2ban 实例，那么它们封禁的 IP 地址列表将各不相同。难道不想所有 fail2ban 实例共享一个封禁列表吗？或者，如果您所有的机器都位于您自己控制的路由器或防火墙后面，难道不想在网络边缘就拦截恶意流量吗？ 这正是 vallumd 可以帮助您实现的目标。 工作原理 Vallumd 连接到 MQTT 代理，读取包含 IP 地址的消息，并将这些 IP...

gatekeeper

Gatekeeper Gatekeeper 是什么？ Gatekeeper 是首个开源 DDoS 防护系统。它旨在扩展到任何峰值带宽，因此能够抵御现在和未来的 DDoS 攻击。尽管 Gatekeeper 采用地理分布式架构，但描述所有必须对入站流量执行的决策的网络策略是集中式的。这种集中式策略使网络运营商能够利用在极高延迟下不可行的分布式算法（例如分布式数据库），并同时抵御多个多向量 DDoS 攻击。 Gatekeeper 的目标用户是机构、服务提供商和内容提供商、企业网络等的网络运营商。它不旨在被个人互联网用户使用。 更多信息，请参阅 Gatekeeper 维基。 如何设置 配置大页...

CMSScan

CMSScan Escanee sitios web de WordPress, Drupal, Joomla, vBulletin en busca de problemas de seguridad. Hecho con en India CMSScan proporciona un panel de seguridad centralizado para escaneos de seguridad de CMS. Está impulsado por wpscan, droopescan, vbscan y joomscan. Admite escaneos tanto bajo...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

poc

Pruebas de concepto Como resultado de la escritura de plugins o simplemente de la búsqueda general de errores, los investigadores de Tenable a menudo se topan con vulnerabilidades nuevas e interesantes. Estas vulnerabilidades se comparten con la comunidad en nuestro blog de la empresa, Medium, o ...

escort-network-osint

陪护网络OSINT调查 概述 本项目分析跨多个平台的陪护相关列表网络，识别共享基础设施、身份复用和集中协调的模式。 目标 识别个人资料、电话号码与平台之间的关系 检测身份复用和轮换的模式 分析潜在的有组织活动指标 关键发现 电话号码在多个身份间被重复使用 存在单人、双人及团体形式的个人资料 跨平台分发策略 集中协调的强烈迹象 查看完整发现：findings/findings.md 数据结构 rawdata/ → 原始数据集（Excel） entities/ → 结构化实体（电话号码、人员、个人资料、平台） evidences/ → 截图与证据 analysis/ → 分析笔记...

Effective Interventions against AI-Enhanced Scams

In 2025, scams were responsible for an estimated $442 billion in direct losses globally. In the United States, reported losses increased by nearly 400% between 2020 and 2025. Though AI in scamming is a relatively new phenomenon, its use significantly changes the economics of scams as well as the...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.4 security update

Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.13 security update

Red Hat multicluster engine for Kubernetes v2.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update

Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that a...

CVE-2026-60372

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-60373

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-60455

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...