chaostoolkit

Chaos Toolkit - Ingeniería del caos para todos los ingenieros Comunidad • Instalación • Tutoriales • Referencia • ChangeLog Chaos Toolkit - Ingeniería del caos para todos los ingenieros El Chaos Toolkit, o como nos encanta llamarlo “ctk”, es una herramienta simple, basada en CLI, que te ayuda a...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...

tlsx

功能 • 安装 • 用法 • 运行tlsx • 加入Discord 一个快速且可配置的TLS抓取工具，专注于基于TLS的数据收集与分析 。 功能 快速且完全可配置的TLS连接 多种TLS连接模式 多种TLS探针 自动TLS回退 以支持旧版TLS 预握手 TLS连接（提前终止） 可自定义的加密套件/SNI/TLS 选择 JARM/JA3 TLS指纹 TLS错误配置 ASN、CIDR、IP、HOST 和URL 输入 标准输入/输出 和TXT/JSON 输出 安装 tlsx 需要 Go 1.24 才能成功安装。要安装，只需运行以下命令或从发布页面下载预编译的二进制文件。console go...

skill-scanner

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...

skill-scanner

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

iLEAPP

iOS Logs, Events, And Plists Parser iLEAPP parses iOS and iPadOS forensic extractions and produces HTML, TSV, timeline, KML, and LAVA output. It supports iOS/iPadOS 11 through current versions. Browse the full searchable artifact list at leapps.org/artifacts filter by LEAPP tool. Quick Start...

RedTeamCoin

RedTeamCoin RedTeamCoin 是一个基于区块链的加密货币矿池实现，专为授权的安全测试和红队行动设计。它使用 Go 语言构建，支持 Java 客户端，能够模拟真实的加密货币挖矿攻击，帮助组织评估其检测能力并量化威胁行为者挖矿活动可能造成的潜在损害。 该工具使安全团队能够在受控环境中，使用隔离的非公开区块链，安全合法地演示企业系统上的加密货币挖矿攻击场景，生成全面的影响报告，并验证安全控制措施。 目录 概述 功能特性 快速开始 工作原理 用法 运行服务器 运行矿工 连接远程服务器 GPU 挖矿 配置 API 参考 架构 开发 贡献 故障排除 文档 许可协议 致谢 概述...

CyberBattleSim

CyberBattleSim 2021年4月8日：请参阅 Microsoft 安全博客上的公告。 CyberBattleSim 是一个实验研究平台，用于研究在模拟的抽象企业网络环境中运行的自动化智能体的交互行为。该模拟提供了计算机网络和网络安全概念的高层抽象。其基于 Python 的 OpenAI Gym 接口支持使用强化学习算法训练自动化智能体。...

MasterHttpRelayVPN

MasterHttpRelayVPN YouTube 安全搜索 和直播流媒体 现已默认绕过并正常工作 ，因此你无需为此使用 youtubeviarelay 或 Cloudflare/VPS 的 exitnode。 语言： 英语 | 波斯语 / فارسی 波斯语版本由 AI 生成。建议使用英文版本。 Telegram 频道 📣： https://t.me/MasterDnsVPN | @MasterDnsVPN Telegram 群组 📣： https://t.me/MasterDnsVPNGroup | @MasterDnsVPNGroup ❤️ 特别感谢 Abolix...

CVE-2022-41828

CVE-2022-41828 Controlador JDBC de Amazon AWS Redshift - Ejecución remota de código RCE El controlador JDBC de Amazon para Redshift es un controlador JDBC tipo 4 que proporciona conectividad a bases de datos a través de las interfaces de programación de aplicaciones API JDBC estándar disponibles ...

slinger

!Contributorscontributors-shieldcontributors-url !Forksforks-shieldforks-url !Stargazersstars-shieldstars-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url !crates iocrates-shieldcrates-url slinger投石器 Un Cliente HTTP para Rust diseñado para hackers. Explora la documentación...

restic

Introducción restic es un programa de copias de seguridad rápido, eficiente y seguro. Es compatible con los tres sistemas operativos principales Linux, macOS, Windows y algunos otros más pequeños FreeBSD, OpenBSD. Para instrucciones detalladas de uso e instalación, consulta la documentación. Pued...

CVE-2026-106494 Backstage: Improper input validation in cloud storage URL readers

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validation in cloud storage url readers. An attacker with write access to a cloud storage bucket used by Backstage could craft object names that...

CVE-2026-106494

The Backstage framework, specifically the @backstage/backend-defaults package, is vulnerable to improper input validation in cloud storage URL readers prior to version 0.17.8 . An attacker with write access to a cloud storage bucket used by Backstage can craft object names that collide with prote...

EUVD-2026-94015

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validation in cloud storage url readers. An attacker with write access to a cloud storage bucket used by Backstage could craft object names that...

PyADRecon

Python3实现的改进版ADRecon，适用于渗透测试人员和蓝队。 ADRecon 是一款收集 Microsoft Active Directory 信息并生成 XSLX 报告的工具，可全面了解目标 AD 环境的当前状态。 !TIP 如果你是红队成员，可以改用 ADRecon-ADWS。 目录 安装 使用 Docker 收集模块 HTML 仪表板 致谢 许可证 安装 stable release from pypi pipx install pyadrecon latest commit from github pipx install...

worldmonitor

World Monitor English | 日本語 实时全球情报仪表盘 — 在统一的态势感知界面中，汇集 AI 驱动的新闻聚合、地缘政治监测和基础设施追踪。 !正能量变体https://img.shields.io/badge/HappyVariant-happy.worldmonitor.app-f59e0b?style=for-the-badge&logo=googlechrome&lo...

CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106493

The Backstage developer portal framework is vulnerable to a path validation issue in its cloud storage catalog providers prior to version 1.54.6 . Specifically, the framework failed to sufficiently validate object paths, allowing a principal with permissions to create or rename objects in Azure B...