sandbox

Concave AI Sandbox Ejecuta código de IA de forma segura, rápida y no fiable Una plataforma de caja de arena de ejecución de código auto-alojable construida con microVMs de Firecracker. Tiempos de inicio inferiores a 200ms con agrupación en caliente basada en instantáneas. Acerca de Concave...

tproxy

tproxy Inglés | 简体中文 | 日本語 Por qué escribí esta herramienta Cuando desarrollo servicios backend y escribo go-zero, a menudo necesito monitorizar el tráfico de red. Por ejemplo: 1. monitorizar conexiones gRPC, cuándo conectarse y cuándo reconectarse 2. monitorizar los pools de conexiones MySQL,...

sliver-gui

Sliver GUI Una consola de operador de escritorio para el framework Sliver C2 en el espíritu de Cobalt Strike y Havoc. Diseñada y desarrollada por Raj Kumar Mullapudi Sliver GUI es un frontend ligero de Wails v2 Go + HTML/CSS/JS plano sobre el servicio gRPC rpcpb.SliverRPC existente de Sliver. No...

ManticoreUI

Manticore UI .. image:: https://raw.githubusercontent.com/trailofbits/manticore/master/docs/images/manticore.png :width: 200px :align: center :alt: Manticore Manticore 用户界面（MUI）项目为不同的反汇编器提供了一个图形用户界面插件，使用户能够轻松交互并查看 Manticore 符号执行引擎 在分析智能合约和原生二进制文件时的进度。 我们正在为 Binary Ninja 和 Ghidra 开发 MUI...

resterm

Resterm An API-as-code workbench for the terminal. resterm.app · docs Resterm is an API client for the terminal. Requests are saved in plain .http and .rest files, so they can live in your repo next to your code. Use them from the terminal UI, or run the same files in CI or CLI with resterm run...

merlin

Merlin Merlin 是一个用 Go 编写的跨平台后渗透命令与控制（C2）服务器及代理软件。 突出特性： merlin-cli 基于 gRPC 的命令行界面，用于连接 Merlin 服务器，支持多用户协作 支持的代理 C2 协议：http/1.1 明文、http/1.1 基于 TLS、HTTP/2、HTTP/2 明文（h2c）、http/3（基于 QUIC 的 http/2） 代理之间通过 SMB、TCP 和 UDP 的点对点（P2P）通信（支持 bind 或 reverse 模式） 可配置的代理数据编码与加密转换：AES、Base64、gob、hex、JWE、RC4 和 XOR...

CQPToolkit

CQP Tool kit 该系统提供了多种组件，用于将QKD集成到安全系统中。它使用C++11编写，但采用GRPC接口，因此可以与多种不同语言进行集成。 快速开始 要在本地运行该软件，请： 下载并安装Ubuntu deb软件包 或 克隆源代码，确保子模块已更新，并在本地构建 要克隆包含子模块的源代码：bash git clone --recurse-submodules [email protected]:QComms/cqptoolkit.git 如果你没有使用 --recurse-submodules 进行克隆，可以通过在源码文件夹中运行 git submodule...

holo

Holo 是一套路由协议套件，旨在支持高规模和自动化驱动的网络。 如需了解路由协议的定义，请参阅此 Wikipedia 页面。 特性 专注于简洁性和正确性 Holo 的主要目标是创建一个可靠、易于维护且可扩展的代码库。随着路由协议及其扩展的复杂度不断增加，基于稳健的基础实现路由协议至关重要。为此，Holo 的代码库优先考虑简洁性、模块化和完善的文档。得益于 Rust 编译器的严格性和广泛的单元测试，大多数回归问题有望在新功能的开发周期早期被捕获。更多详情请参阅 架构 页面。 面向自动化 Holo 专为需要基于结构和模型化数据进行可编程配置和监控的高规模、自动化驱动网络而设计。Holo...

gtunnel

Documentation can be found at: https://hotnops.gitbook.io/gtunnel/...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

CVE-2026-82041

UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand, the handler mapped to the /command/hostname STOMP destination, where no role check or command allowlist is applied before forwarding supplied commands. Any authenticated user,...

EUVD-2026-91796

UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand, the handler mapped to the /command/hostname STOMP destination, where no role check or command allowlist is applied before forwarding supplied commands. Any authenticated user,...

CVE-2026-82041

UTMStack versions before 11.2.16 are vulnerable to a missing authorization flaw in the UTMIncidentCommandWebsocket.processCommand() function. Specifically, the handler mapped to the /command/{hostname} STOMP destination fails to perform role checks or apply a command allowlist. This allows any au...

not-going-anywhere

Resumen Not Go-ing Anywhere es un conjunto de programas Golang vulnerables pensados para mostrar vulnerabilidades comunes y proporcionar un banco de pruebas para que los usuarios encuentren, corrijan y remedien vulnerabilidades de Golang. Está modelado a partir de nuestro repositorio not so smart...

gori

Hackea desde la terminal. Instalación • Uso • Documentación • Contribuir gori 고리 — coreano para anillo, enlace, bucle se sitúa en el bucle entre tu cliente y su objetivo, capturando cada petición y respuesta como un flujo que puedes reproducir, fuzzear y escanear en HTTP/1.1, HTTP/2, WebSocket,...

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

A flaw was found in OpenTelemetry-Go, specifically within its gRPC log exporter. This vulnerability allows a network attacker to bypass the intended private Certificate Authority CA pinning and mutual Transport Layer Security TLS configurations. The issue arises because the environment-only TLS...

CLEANSTART-2026-JQ09832 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-TQ62696 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the consul package. gRPC-Go is the Go language implementation of gRPC...

SUSE CVE-2022-29224

Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can "hold" prevent removal upstrea...

CVE-2026-5724

Resumen El servicio frontend de Temporal no aplica autenticación en las RPC gRPC de streaming. La cadena de interceptores de streaming omite el interceptor de autorización, lo que permite que llamadores no autenticados accedan a AdminService/StreamWorkflowReplicationMessages, un endpoint...