CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: karpenter, aactl, ingress-nginx-controller, cert-manager, loki, k8s-device-plugin, spire-server, kubernetes, external-dns, flux...

Artemis

Artemis is a modular vulnerability scanner. It's the tool that powers CERT PL scanning activities by checking various aspects of website security and building easy-to-read messages ready to be sent to the scanned organizations. Quick Start 🔨 | Docs 📚 If you want to use additional modules that...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Frameworkpharos, particularly the function hashing and malware analysis tools, but is expected t...

kaiju

إطار عمل CERT Kaiju لتحليل البرامج الثنائية لـ GHIDRA CERT Kaiju هي مجموعة من أدوات تحليل البرامج الثنائية لـ Ghidra. هذا تطبيق بلغة Java لـ Ghidra لبعض ميزات إطار عمل CERT Pharos لتحليل البرامج الثنائيةpharos، خاصة أدوات تجزئة الدوال وتحليل البرامج الضارة، ولكن من المتوقع أن تتوسع بإضافة أدوات...

cyber_rss

cyberrss cert 11 Alertes ASD ACSC Australie CERT-FR ANSSI Avis de cybersécurité CISA Avis ICS CISA Avis médicaux ICS CISA JPCERT/CC Blog JPCERT/CC Flux RSS complet UK NCSC Recommandations UK NCSC Actualités UK NCSC Rapports UK NCSC actualités 11 Bleeping Computer forum BleepingComputer CyberScoop...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

clone-cert

clone-cert.sh This is a simple shell script that retrieves the X.509 certificate associated with a TLS wrapped TCP port and uses openssl to create a similar certificate by replacing the public key and fixing the signature. This is particularly useful if you want to demonstrate why self-signed...

ChopChop

ChopChop ChopChop is a command-line tool for dynamic application security testing on web applications, initially written by the Michelin CERT. Its goal is to scan several endpoints and identify exposition of services/files/folders through the webroot. Checks/Signatures are declared in a config fi...

certfuzz

This project contains the source code for the CERT Basic Fuzzing Framework BFF BFF for Windows was formerly known as the CERT Failure Observation Engine FOE. If you are looking for runnable code, you should download the latest releases at: BFF Using this code Depending on your preferred level of...

keyfinder

Overview Installation Keyfinder Usage Key Parsing Simple Example Verbose Output APK Parsing Simple APK Example crt.sh Checking Key File Usage Overview CERT Keyfinder is a utility for finding and analyzing key files on a filesystem as well as contained within Android APK files. CERT Keyfinder...

vcenter_saml_login

vCenter SAML Login Tool Un outil pour extraire le certificat du fournisseur d'identité IdP des sauvegardes vCenter et se connecter en tant qu'Administrateur Contexte Généralement, lors de missions, nous accédons aux sauvegardes vCenter sur un serveur de fichiers ou obtenons un accès root à l'hôte...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Contournement d'authentification TLS ADBD Android Confusion de type EVPPKEYcmp → shell ADB non autorisé 🔥 Vue d'ensemble Un contournement d'authentification critique dans le démon ADB d'Android adbd permet à tout attaquant sur le réseau local d'obtenir un shell complet sur un...

class_struggle

Class Struggle Repository accompanying the "Class Struggle" article. The repository demonstrates use of an autoencoder for detecting domains similar to a known subset of phishing domains published by CERT Polska. Data Sources CERT Polska Warning List This project uses data from the CERT Polska...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

IIITA-IoT-Security-Research

IIIT Allahabad – Stage de recherche en sécurité IoT Aperçu Ce dépôt présente le travail réalisé durant mon stage de recherche à l'Indian Institute of Information Technology, Allahabad IIIT Allahabad au sein du laboratoire Cryptography and Network Security CNS. Au cours de ce stage, j'ai travaillé...

IRM

French version The French version is available on CERT aDvens's GitHub...

globalprotect-ca-cert-ipc

c2us.exe - Lance une commande en tant qu'utilisateur en cours dans la session de bureau de l'utilisateur connecté. Dans ce cas, lance cmd.exe en tant que SYSTEM dans la session de bureau de l'utilisateur non privilégié. c2us.c - Code source de c2us.exe. epinject.exe - Injecteur de point d'entrée,...

pwnage24mtk

pwnage24mtk Exploit de certificat pour les appareils MTK. Il existe une faille logique dans le processus de vérification des certificats MTK. Similaire à CVE-2023-20696. Peut être corrigé en juin. Avertissement Ce projet est uniquement utilisé pour la recherche. Assurez-vous d'obtenir une...