ODIN

ODIN Observe, Detect, and Investigate Networks Current version: v2.0.0 "Huginn" ODIN is Python tool for automating intelligence gathering, asset discovery, and reporting. Remember, check the dev branch for the bleeding edge, and feedback is welcome! See the GitHub wiki for details and installatio...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

LetsMapYourNetwork

Omniscient - Let’s Map Your Network v2.0 Table of Contents 1. WHAT IT IS 2. WHY IT IS 3. WHERE TO USE IT 4. Presentations 5. Key Features 6. Installation Guidelines 7. HOW TO USE IT 8. Understand Node 9. Contributer 10. LMYN In Action 11. Roadmap 12. Contact Information WHAT IT IS It is utmost...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

guac

GUAC: Граф для понимания состава артефактов Примечание: GUAC находится в активной разработке — если вы заинтересованы во вкладе, пожалуйста, ознакомьтесь с руководством для участников. GUAC — это инкубационный проект OpenSSF под эгидой Рабочей группы по целостности цепочки поставок. Граф для...

slater

Slater 현재 버전:v0.25.2 — 모든 릴리스. 한 줄 요약: Slater는 메모리에 맞지 않는 그래프 — 수억 개의 노드와 수십억 개의 엣지를 수백 MB 남짓의 RAM으로 — 표준 Bolt 프로토콜로 서비스하므로 어떤 neo4j 드라이버든 그대로 동작하며, 그래프 옆에는 디스크 기반 벡터 검색이 자리 잡고, 이 모든 것을 포기하지 않으면서 실시간 내구성 있는 쓰기 를 처리합니다. 상주 메모리는 그래프 크기가 아니라 사용자가 선택한 캐시 예산 에 의해 결정됩니다. 바로가기 | | | ---|---|---|---...

nuvola

nuvola nuvola со строчной n — это инструмент для дампа и проведения автоматического и ручного анализа безопасности конфигураций и сервисов AWS с использованием предопределённых, расширяемых и пользовательских правил, созданных с помощью простого синтаксиса Yaml. Общая идея этого проекта — создать...

cirro

Cirro — это расширяемая платформа для исследований в области безопасности, которая позволяет исследователям и специалистам по тестированию на проникновение собирать, анализировать и визуализировать облачные среды и связи между удостоверениями с помощью графовых баз данных. Благодаря модульной...

CVE-2024-27348-Apache-HugeGraph-RCE

Уязвимость удаленного выполнения кода в Apache HugeGraph Server CVE-2024–27348 CVE-2024-27348 — это критическая уязвимость удаленного выполнения команд RCE в Apache HugeGraph Server, популярной системе графовых баз данных. Проблема находится в интерфейсе языка обхода Gremlin, который позволяет...

gitoops

GitOops! 😱 all paths lead to clouds GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? Security teams running infrastructure in cloud environments looking to gai...

RFC-Security-Research

RFC-Security-Research 인터넷 RFC의 보안 측면을 분석하는 데 도움이 되는 원본 논문과 헬퍼 스크립트입니다. 개요 이 저장소에는 RFC 스타일로 작성된 RFC 보안 검토review와 함께, 기본 분석에 필요한 데이터를 수집하고 RFC 말뭉치에 대한 그래프 데이터베이스 분석을 지원하는 데 필요한 Cypherneo4j 그래프 데이터베이스 코드를 생성하는 데 사용된 다양한 Python 헬퍼 스크립트가 포함되어 있습니다. 그래프 데이터베이스 생성 이 저장소의 스크립트는 백서에 필요한 정보를 추출하고 이를 이 경우...

thingernet-graph

thingernet-graph IoT 기기 모음을 시각화하고 쿼리하기 위한 neo4j Cypher 표현을 생성하는 파이썬 스크립트. 이 스크립트는 '사물'을 설명하는 JSON 파일 디렉토리를 읽고 관련 neo4j cypher 텍스트를 생성하여 neo4j로 가져올 수 있게 하며, 'thingernet'의 그래프 데이터베이스 표현을 산출합니다. 'thingernet'은 노드와 엣지 속성을 가진 방향성 그래프로, thingernet의 보안을 추론하고 평가할 수 있게 해줍니다. 함께 제공되는 NCC Group 백서에서는...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

GO-2026-5529 vulnerabilities

Vulnerabilities for packages: dgraph...

CVE-2026-63637

Dgraph is an open source distributed GraphQL database. Prior to 25.3.8, maybeQuoteArg in graphql/resolve/queryrewriter.go passes regexp filter strings into generated DQL without quoting or validating the /pattern/flags form, allowing crafted GraphQL query or mutation filters to inject DQL...

SUSE CVE-2026-44840

Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, the checkUserPassword GraphQL query in Dgraph is vulnerable to DQL Dgraph Query Language injection. User-supplied password values are interpolated directly into a DQL checkpwd query via fmt.Sprintf without any escapin...

CVE-2026-10130 QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts

QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup request with a known victim email address. The signup route unconditionally creates and links a new token to the matching...

CVE-2026-55615

Langroid CVE-2026-55615 affects the Neo4jChatAgent path, where LLM-generated Cypher queries are sent unvalidated to the Neo4j driver prior to version 0.65.5. Connected docs describe a prompt-injection risk enabling read/write/destroy of graph data and, with APOC or dbms.security, potential OS com...

EUVD-2026-28808

Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag and NORNICDBADDRESS / server.host config key is plumbed through to the HTTP server correctly but never reaches the Bo...