Pipeline Configuration Exposure Detection

Detects Pipeline Configuration Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pipeline Configuration Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pipeline Configuration Exposure Detection...

Uptime Kuma - Panel Detection

Realtime website and application monitoring tool !/usr/bin/env python3 -- coding: utf-8 -- """Realtime website and application monitoring tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Uptime Kuma - Panel...

Apache2 Default Test Page Detection

Detects Apache2 Default Test Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache2 Default Test Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache2 Default Test Page Detection', 'description':...

HashiCorp Vault Detect

Detects HashiCorp Vault !/usr/bin/env python3 -- coding: utf-8 -- """Detects HashiCorp Vault.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HashiCorp Vault Detect', 'description': 'Detects HashiCorp Vault', 'author...

VMware Authentication Daemon Detection

vmauthd is the VMWare authentication daemon that is included with many VMWare products, including ESXi, and Workstation. !/usr/bin/env python3 -- coding: utf-8 -- """vmauthd is the VMWare authentication daemon that is included with many VMWare products, including ESXi, and .""" import socket from...

Exposed Glances API Detection

Glances is a cross-platform system monitoring tool written in Python. !/usr/bin/env python3 -- coding: utf-8 -- """Glances is a cross-platform system monitoring tool written in Python.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

React SPA Stack Detection

Identifies standalone React SPAs CRA / Vite / classic and explicitly differentiates them from Next.js so the correct scanner pack can run. !/usr/bin/env python3 -- coding: utf-8 -- """Fingerprint React SPA stacks and distinguish them from Next.js.""" from kittysploit import from...

Bootstrap Admin Panel Template Panel - Detect

Bootstrap Admin Panel Template panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Bootstrap Admin Panel Template panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bootstrap Admin Panel...

UserGate NGFW/UTM Admin Panel - Detect

Detect UserGate NGFW/UTM Admin Panel. !/usr/bin/env python3 -- coding: utf-8 -- """Detect UserGate NGFW/UTM Admin Panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'UserGate NGFW/UTM Admin Panel - Detect',...

Antiphishing v30329629285

DONATE - DASHBOARD VECTORS - CONTRIBUTING - SUBMIT A VECTOR - REST API CTI - WIKI Protect against phishing attacks Functionality This rule is built using malicious URLs and domains involved in phishing attacks. We utilize some community APIs and NRD Newly Registered Domain to construct these...

laravel-threat-detection v1.5.0

Laravel Threat Detection Passive intrusion detection for Laravel — see every SQL injection, XSS, scanner, and bot probe hitting your app, logged with full context. It's an IDS, not a WAF: it never blocks, filters, or modifies a request. Drop it into any Laravel 10–13 app and it starts scanning...

Closing the Sovereignty Gap: Bringing Active API Protection to Self-Managed Environments

How Thales is bringing active API protection to self-managed environments, without compromising digital sovereignty. APIs Changed Faster Than Security Architectures Organizations have invested heavily in discovering APIs, classifying sensitive data, and understanding API risk. That's progress. Bu...

Web-Server-Log-Parser-Threat-Detector

Log threat detector A lightweight Python security tool that pa...

nerva v1.53.1

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

Antiphishing v30314202504

DONATE - DASHBOARD VECTORS - CONTRIBUTING - SUBMIT A VECTOR - REST API CTI - WIKI Protect against phishing attacks Functionality This rule is built using malicious URLs and domains involved in phishing attacks. We utilize some community APIs and NRD Newly Registered Domain to construct these...

tcpreplay 4.6.0

tcpreplay is a BSD-style licensed tool to replay saved tcpdump files at arbitrary speeds. It provides a variety of features for replaying traffic for both passive sniffer devices as well as inline devices such as routers, firewalls, and intrusion detection systems. Many NIDSs fare poorly when...

(EC)2: Event-Centric Explainability for Cybersecurity through Multi-Agent LLM Investigations

Security operations centers rely on anomaly detection systems to flag suspicious events. Feature-level explanations for anomaly detectors offer limited value for operational investigations. To effectively handle alerts, analysts need to know contextual relationships and need actionable...

Oracle Linux 10 : libreswan (ELSA-2026-46398)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46398 advisory. 5.3.2-1.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 5.3.2-1 - Update to libreswan-5.3.2 5.3.1-1 - Update to libreswan-5.3.1 Tenabl...

PT-2026-65455

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

Malicious code in cfgzen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a904eba641878bae63f76595a468b0faaa66fd27104ac557249e457f005c3fb1 The package installs a site-wide cfgzen.pth containing import dotcfg, which Python's site machinery executes automatically at every interpreter start...