Nimbus Vestige

Nimbus Vestige NV 面向云与身份事件响应的取证重建引擎。 面对碎片化的云、SaaS 和身份遥测数据——控制平面日志、登录事件、令牌与授权活动——NV 会重建入侵最可能在账户与服务之间的移动路径，枚举其他最可能的潜在路径，并以经过校准、可解释的置信度报告每一步。它拒绝断言证据无法支持的内容。 检测只告诉你发生了 某件事 。Nimbus Vestige 告诉你 如何发生 ——以及 还可能发生什么 。 为什么存在 现代入侵并非“破门而入”，而是“登录进入”。身份如今已成为主要攻击载体，牵涉到绝大多数云 IR 调查，而且大多数入侵跨越多个表面——身份、云、SaaS...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

contact.sh

contact.sh セキュリティ脆弱性を報告するための連絡先を見つけるOSINTツールです。 インストール 🐧 GNU/Linux whois パッケージと jq パッケージがインストールされていることを確認してください。 root@kitploit: $ git clone https://github.com/EdOverflow/contact.sh.git $ cd contact.sh/ $ chmod u+x contact.sh $ ./contact.sh -d google.com -c google 🍎 OSX root@kitploit: $ brew insta...

Persistnux

Persistnux デジタルフォレンジックおよびインシデント対応（DFIR）調査のための包括的なLinux永続化検出ツール。 概要 Persistnuxは、攻撃者が侵害したシステムへのアクセスを維持するために使用する既知のLinux永続化メカニズムを特定するために設計されたbashベースのツールです。システム全体で包括的なチェックを実行し、さらなる分析のためにCSVおよびJSONL形式の詳細レポートを生成します。 特徴 包括的な検出 : 主要なLinux永続化メカニズムをすべてカバー ライブ分析 : 最小限の依存関係でライブシステム上で直接実行 詳細な出力 :...

CVE-2025-55182-Auto-Scanner

CVE-2025-55182 Scanner 是一款高性能工具，用于检测存在漏洞的 Next.js Server Action 端点。 它利用多线程扫描、基于置信度的检测以及多种响应指标，来识别潜在的远程代码执行 RCE 漏洞。 特性 高速并发扫描 基于置信度的漏洞评分 WAF 绕过载荷生成 Header 与响应模式分析 实时进度跟踪 自动保存存在漏洞的目标 工作原理 该扫描器遵循以下步骤： 1. 从文件中加载目标 URL 2. 生成特制载荷 3. 向目标发送 HTTP 请求 4. 分析响应头与响应体 5. 计算漏洞置信度评分 6. 若评分 ≥ 40%，则将目标标记为存在漏洞 7...

reconkg

reconkg A vulnerability triage tool. It takes what a scan already found, works out which CVEs plausibly apply, tells you how confident it is and why, and gives you the commands to check for yourself. It does not scan anything, and it does not exploit anything. Install on Kali root@kitploit: git...

Vlun-Agent-X

VulnAgent-X 研究原型 VulnAgent-X 是一个面向论文复现的多 Agent 漏洞/缺陷检测原型。 输入本地仓库或 diff，输出结构化 findings、证据链、定位结果、置信度和实验日志。 核心能力 输入形式：repo path 或 unified diff 工作流：screening - context expansion - scheduler - router - experts - sceptic - verificationstub - evidence fusion 输出字段： issuetype locationfile + line range...

New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable

Las Vegas, United States, 5th August 2026, CyberNewswire...

CVE-2026-35210

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows any authenticated user with KNOWLEDGEKNUPDATE permission to bypass Confidence Level validation and Object Marking...

PYSEC-2026-3445

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows any authenticated user with KNOWLEDGEKNUPDATE permission to bypass Confidence Level validation and Object Marking...

CVE-2026-35210

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows any authenticated user with KNOWLEDGEKNUPDATE permission to bypass Confidence Level validation and Object Marking...

CVE-2026-35210 OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows any authenticated user with KNOWLEDGEKNUPDATE permission to bypass Confidence Level validation and Object Marking...

CVE-2026-35210 OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows any authenticated user with KNOWLEDGEKNUPDATE permission to bypass Confidence Level validation and Object Marking...

CVE-2026-35210

Summary: OpenCTI prior to version 7.260326.0 contains an authorization bypass via the synchronized-upsert: true HTTP header, exploitable by any authenticated user with KNOWLEDGE_KNUPDATE permission. This allows bypassing Confidence Level validation and Object Marking restrictions, enabling attack...

PT-2026-56601

Name of the Vulnerable Software and Affected Versions OpenCTI versions prior to 7.260326.0 Description An authorization bypass allows authenticated users with KNOWLEDGE KNUPDATE permission to circumvent Confidence Level validation and Object Marking restrictions. This is achieved by injecting the...

Improper Handling of Exceptional Conditions

Overview @hulumi/drift is a Local-first drift classifier and live posture validator — distinguishes provider-API churn from console break-glass from genuine IaC drift, then renders read-only live posture findings as JSON, Markdown, and SARIF. Verdict logic mirrors HulumiDrift.tla Ha Affected...

A Validated Prompt Bank for Malicious Code Generation: Separating Executable Weapons from Security Knowledge in 1,554 Consensus-Labeled Prompts

Existing benchmarks of language-model refusal on malicious-coding tasks routinely conflate requests for executable malicious software with requests for harmful security knowledge. This conflation matters because the two request types plausibly trigger distinct refusal pathways in safety-aligned...

False Security Confidence in Benign LLM Code Generation

Prior work has demonstrated that functionally correct yet vulnerable outputs arise systematically in threat-oriented settings, where adversarial or implicit channels are used to induce security failures in code agents and automated patching workflows. This note introduces a complementary but...

Exploit for Path Traversal in Vmware Cloud_Foundation

CTT-enhanced-VMware-vCenter Looking at current high-impact vul...

Decision-Aware Trust Signal Alignment for SOC Alert Triage

Detection systems that utilize machine learning are progressively implemented at Security Operations Centers SOCs to help an analyst to filter through high volumes of security alerts. Practically, such systems tend to reveal probabilistic results or confidence scores which are ill-calibrated and...