swarm

swarm v0.6.0 English | 中文. Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function...

ws4-secure-design-agentic-systems

CoSAI Workstream 4: Secure Design Patterns for Agentic Systems This repository is for the work of the CoSAI Workstream 4, Secure Design Patterns for Agentic Systems. CoSAI is an OASIS Open Project and an open ecosystem of AI and security experts from industry leading organizations dedicated to...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: root@kitploit: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install...

Hale

Acerca de Hale es un monitor/espía de command & control para botnets con un diseño modular que facilita el desarrollo de nuevos módulos para monitorizar nuevos protocolos usados por servidores C&C. Hale incluye monitores IRC y HTTP desarrollados con Twisted para manejar la escalabilidad de un gra...

postenum

Postenum makes life easier for security professionals by automating the process of gathering critical system information after gaining a foothold. It helps quickly spot misconfigurations and privilege escalation opportunities, streamlining the path to deeper access. Built to be lightweight,...

vigolium

Vigolium - Escáner de vulnerabilidades de alta fidelidad que fusiona IA agéntica con velocidad nativa, modularidad y precisión Vigolium ofrece dos modos de escaneo complementarios: Native Scan : Escaneo determinista y multifase con 317 módulos que abarcan el descubrimiento de contenido, el rastre...

buttinsky

Buttinsky Open Source Botnet Monitoring Description Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open source framework for automated botnet monitoring. The modular design will allow full...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure...

cve-2025-29927

CVE-2025-29927 Vulnerabilidad CVE-2025-29927 Todas las versiones de Next.js desde la 11.1.4 hasta la 13.5.6, 14.x anteriores a 14.2.25, y 15.x anteriores a 15.2.3 se ven afectadas por esta vulnerabilidad. El impacto es particularmente significativo para aplicaciones que dependen de middleware par...

logira

logira OS-level runtime auditing for unpredictable automation. logira is an observe-only Linux CLI that records runtime exec, file, and net events via eBPF. It helps you see what actually happened during AI agent runs and other forms of automation, with per-run local storage for auditing, post-ru...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

fileintel

fileintel Esta es una herramienta utilizada para recopilar diversas fuentes de inteligencia para un archivo determinado. Fileintel está escrito de forma modular para que se puedan agregar fácilmente nuevas fuentes de inteligencia. Los archivos se identifican por su hash MD5, SHA1, SHA256. La sali...

CVE-2021-28663

CVE-2021-28663 Una fuga PoC básica para CVE-2021-28663 Detalles internos de la vulnerabilidad de puerta trasera del kernel de Android Esta es una PoC básica para CVE-2021-28663. Un fallo de diseño en el controlador del kernel de GPU Mali para Android. 1. Crear un GPUVA y también hacer mmap para...

trust-my-agent-ai

🛡️ TrustMyAgent Security bodyguard for OpenClaw agents Website • Trust Center • Quick Start • Contributing An EDR-like security agent for OpenClaw agents. Runs 41 security checks across 14 domains, calculates a trust score 0-100, and sends telemetry to a centralized Trust Center dashboard where...

GCPGoat

GCPGoat : A Damn Vulnerable GCP Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...

burner-net

BurnerNet Cliente HTTP antirforense y de confianza cero. Borra secretos. Corta rastros. RCP en un tanque sigiloso. 👻 BurnerNet es un cliente HTTP antirforense en C++20. Proporciona una API fluida, similar a CPR, para aplicaciones que no pueden confiar plenamente en la máquina local: borra...

malleable-c2

Guía de referencia para el diseño de Malleable C2 de Cobalt Strike Este proyecto pretende servir como referencia al diseñar perfiles Malleable C2 de Cobalt Strike. ¡Verifique siempre su perfil con ./c2lint /ruta/a/mi.perfil antes de usarlo! Guía de perfiles Malleable C2 Lo siguiente profundiza en...

CVE-2019-17041

Rsyslog - ¿qué es? Rsyslog es un r ápido sys tema para el proc esamiento de log s. Ofrece alto rendimiento, excelentes características de seguridad y un diseño modular. Aunque comenzó como un syslogd normal, rsyslog ha evolucionado hasta convertirse en una especie de navaja suiza del logging, cap...

AzureGoat

AzureGoat : A Damn Vulnerable Azure Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure...