threatest

Threatest Threatest는 위협 탐지를 종단간end-to-end으로 테스트하기 위한 CLI 및 Go 프레임워크입니다. Threatest를 사용하면 공격 기술을 실행detonate하고, 예상한 알림이 선호하는 보안 플랫폼에서 생성되었는지 확인할 수 있습니다. 발표 블로그 게시물 읽기: https://securitylabs.datadoghq.com/articles/threatest-end-to-end-testing-threat-detection/ 개념 디토네이터 디토네이터detonator는 공격 기술이 어떻게 그리고 어...

ehids-agent

영어 | 中文介绍 eHIDS 소개 eBPF 커널 기술로 구현된 HIDS demo입니다. 경고 eBPF 기반 데모일 뿐입니다. 대신 Tetragon / Tracee / falco를 사용하세요. 구현 및 기능: 1. TCP 네트워크 데이터 캡처 2. UDP 네트워크 데이터 캡처 3. uprobe 모드에서 DNS 정보 캡처 4. 프로세스 데이터 캡처 5. uprobe 방식으로 JAVA RASP 명령 실행 시나리오 이벤트 캡처 6. Go 프레임워크로 eBPF 구현, kprobe/uprobe 마운트 방식에 대한 다중 유형 이벤트의 추상...

GOSINT

GOSINT - Фреймворк сбора и обработки открытых данных об угрозах Фреймворк GOSINT — это проект для сбора, обработки и экспорта высококачественных индикаторов компрометации IOCs. GOSINT позволяет аналитику безопасности собирать и стандартизировать структурированные и неструктурированные данные об...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

xpfarm

XPFarm よく知られたオープンソースのセキュリティツールを単一のWeb UIでラップする、オープンソースの脆弱性スキャナーです。 目次 セクション| 説明 ---|--- Why| XPFarmの背後にある動機と哲学 Wrapped Tools| XPFarmがオーケストレーションする10のオープンソースツール Architecture Map| 完全なシステムアーキテクチャ、スキャンパイプライン、データフロー、AIサブシステム Overlord - AI Binary Analysis| バイナリ/マルウェア解析のための内蔵AIエージェント Setup|...

CVE-2026-44332

Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer function in the BasicAuth middleware in middleware/basicauth/config.go uses short-circuit evaluation that skips password hash comparison for non-existent usernames, enabling reliable remote username...

Iris 安全漏洞

Iris is a fast, simple, yet fully functional and highly efficient Go web framework developed under the DFIR-IRIS open source project. Versions of IRIS prior to 2.4.28 contained security vulnerabilities; these vulnerabilities stemmed from the use of the HTTP GET method to alter server state, makin...

PT-2026-21803

Name of the Vulnerable Software and Affected Versions Fiber versions prior to 3.1.0 Description The use of the fiber flash cookie can lead to an unbounded allocation on any server. A specially crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory through unvalidat...

EUVD-2021-1002

Malware in sbrugna...

EUVD-2023-2708

Malicious code in bioql PyPI...

SUSE CVE-2025-48075

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using keyidxvalue syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process t...

net/http: Denial of service due to improper 100-continue handling in net/http

A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service...

gf_cms 信任管理问题漏洞

gfcms is a GoFrameV2 based web content management system by demozx individual developer. A trust management issue vulnerability exists in gfcms version 1.0 and 1.0.1, which stems from an issue with the use of hard-coded credentials in the internal/logic/auth/auth.go page of the JWT Authentication...

Beego 路径遍历漏洞

Beego is an open source web framework based on the Go language. A security vulnerability exists in Beego v2.0.3 and earlier versions, which stems from the use of path.join by the leafInfo.match function to handle wildcardValues, which may lead to cross-directory risks...

Beego 后置链接漏洞

Beego is an open source web framework based on the Go language. A security vulnerability in the file profile.go for the function MemProf in Beego 2.0.2 allows attackers to locally launch a symbolic link attack...