detect-secrets

detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...

grr

GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client agent that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation Please visit our documentation website if you want to know...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 是 GitHub.com 和 GitHub Enterprise Server 中的一个远程代码执行漏洞。 该漏洞可通过向 git push 命令注入命令来利用，具体如下： root@kitploit: git push -o '' origin master 若要审查该漏洞的任何利用行为，我们建议您检查 /var/log/github-audit.log 中推送操作里包含 ";" 的 push options。 受影响版本： GitHub Enterprise Server = 3.19.1 修复版本：...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

CVE-2026-92808

CVE-2026-92808 is a server-side request forgery (SSRF) vulnerability in the UnifiedLogin service of Altium Enterprise Server . An unauthenticated network attacker can force the server to issue outbound HTTP requests to arbitrary destinations, including internal services reachable only from the se...

EUVD-2026-81101

A server-side request forgery SSRF vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the server to issue outbound HTTP requests to a destination of the attacker's choosing, including internal services that are reachable onl...

attack-stix-data

ATT&CK® STIX 数据 MITRE ATT&CK 是一个全球可访问的知识库，收录了基于真实世界观察得出的对手战术和技术。 ATT&CK 知识库被用作私营部门、政府以及网络安全产品和服务社区中开发特定威胁模型和方法论的基础。 本仓库包含以 STIX 2.1 JSON 集合形式表示的 MITRE ATT&CK 数据集。 如果您正在寻找表示 ATT&CK 的 STIX 2.0 JSON，请参阅我们的 MITRE/CTI GitHub 仓库， 其中包含相同的数据集，但使用 STIX 2.0，并且不提供本仓库所提供的集合功能。 仓库结构 root@kitploit: . ├─...

it355-lab4-enterprise-lan-security

IT355 实验4：企业局域网安全与Shellshock分析 📌 项目概述 此仓库包含企业局域网环境的全面安全评估。本项目的核心是在Linux Web服务器上识别、利用和修复Shellshock CVE-2014-6271漏洞。 🛠️ 技术栈与工具 环境： Fedora Linux 服务器, Windows 主机/客户端 网络： Cisco Packet Tracer IT/OT 隔离, NAT, 路由协议 服务： Apache HTTP Server httpd, GNU Bash 安全： Firewalld, 通过 CGI 脚本进行 Shellshock 利用 文档： Markdown...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

CVE-2023-38646-Poc

CVE-2023-38646-Poc 用法 python check.py ip port 易受攻击的版本 root@kitploit: Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0.45 v0.45.4.1 Metabase open source...

coraza

Coraza - Web Application Firewall...

CyberBattleSim

CyberBattleSim April 8th, 2021: See the announcement on the Microsoft Security Blog. CyberBattleSim is an experimentation research platform to investigate the interaction of automated agents operating in a simulated abstract enterprise network environment. The simulation provides a high-level...

eaphammer

作成者: Gabriel Ryan s0lst1c3 現在のリリース: v1.14.1 サポート: Python 3.9+. 概要 EAPHammerは、WPA2-Enterpriseネットワークに対する標的型evil twin攻撃を実行するためのツールキットです。全範囲のワイヤレスアセスメントやレッドチームの活動で使用することを目的としています。そのため、最小限の手動設定で強力なワイヤレス攻撃を実行できる、使いやすいインターフェースの提供に重点が置かれています。 このツールの速さを示すため、Quick...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

Phoenix

Homepage | Wiki | Contributing Phoenix Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, functionality, & usability. Here a detailed list of Phoenix's features & enhancements. !NOTE...

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise ⚡ Uso sencillo Use este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizadas Ejemplo de configuración: root@kitploit: git clone...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets 概要 git-all-secrets は以下のことが可能なツールです： 組織の複数の公開/非公開 GitHub リポジトリをクローンし、スキャンする、 組織に所属するユーザーの複数の公開/非公開 GitHub リポジトリをクローンし、スキャンする、 組織の単一の公開/非公開リポジトリをクローンし、スキャンする、 ユーザーの単一の公開/非公開リポジトリをクローンし、スキャンする、 ユーザーの単一の公開/シークレット gist をクローンし、スキャンする、 組織内のチームのリポジトリをクローンし、スキャンする、 上記すべてを同時に行う！ そうです！...