MalScan

MalScan MalScan è un semplice scanner euristico per file PE scritto in Python che puoi utilizzare per analizzare rapidamente un file PE e scoprire se esiste qualcosa di sospetto. È uno strumento semplice quindi non offre molte funzionalità sofisticate. Sei libero di estenderlo o farci quello che...

navgix

navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...

Antiphishing

DONA - VETTORI DASHBOARD - CONTRIBUTI - INVIA UN VETTORE - REST API CTI - WIKI Intelligence predittiva anti-phishing per Suricata: blocca l'avversario al giorno zero Antiphishing è un'infrastruttura open-source GPLv3 di Cyber Threat Intelligence CTI e un ruleset Suricata progettato per...

CopyFail-Scanner-CVE-2026-31431

CopyFail-Scanner-CVE-2026-31431 CopyFail-Scanner è uno strumento che consente di identificare la vulnerabilità CopyFile CVE-2026-31431. -Enumera il sistema -Valuta l'esposizione alla vulnerabilità -Indica lo stato vulnerabile/non vulnerabile -Suggerisce e, opzionalmente, esegue un aggiornamento...

gaia

Gaia - Scoperta della Superficie di Attacco e Triage Assistito dall'IA Gaia è uno strumento di analisi della superficie di attacco basato su CLI che scopre endpoint e parametri, riduce il rumore e mette in evidenza rischi rilevanti per la sicurezza utilizzando euristiche statiche e ragionamento A...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

copyfailscan

copyfailscan Helper Bash: rileva gli host opzionale CIDR via nmap, quindi esegue controlli SSH di sola lettura per CVE-2026-31431 Copy Fail / algifaead, CVE-2026-31677 / CVE-2026-43077 euristiche AFALG RX, CVE-2026-23111 nftables + namespace utente, CVE-2026-23102 arm64 SVE/SME. Solo euristiche —...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

Wp2shell-ioc-scanner

=== wp2shell IOC Scanner === Collaboratori: michaelkanda URI autore: https://designare.at URI plugin: https://designare.at Tag: security, incident-response, wordpress, shadow-admin, ioc Richiede almeno: 6.0 Testato fino a: 7.0 Richiede PHP: 7.4 Versione stabile: 1.3.1 Licenza: GPLv2 o successive...

secops-ai-threat-analyzer

🛡️ SecOpsAI: Threat Analysis & Adaptive Security Engine An e...

CVE-2026-32898

OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind metadata and permissive name heuristics. Attackers can bypass interactive approval prompts for read-class operations by spoofing tool...

When the Abyss Looks Back: Unveiling Evolving Dark Patterns in Cookie Consent Banners

To comply with data protection regulations such as the EU General Data Protection Regulation GDPR and the California Consumer Privacy Act CCPA, websites widely deploy cookie consent banners to collect users' privacy preferences. In practice, however, these interfaces often embed dark patterns tha...

EUVD-2026-13976

OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind metadata and permissive name heuristics. Attackers can bypass interactive approval prompts for read-class operations by spoofing tool...

PT-2026-26745

OpenClaw versions prior to 2026.2.21 BlueBubbles webhook handler contains a passwordless fallback authentication path that allows unauthenticated webhook events in certain reverse-proxy or local routing configurations. Attackers can bypass webhook authentication by exploiting the loopback/proxy...

Defending the Power Grid by Segmenting the EV Charging Cyber Infrastructure

This paper examines defending the power grid against load-altering attacks using electric vehicle charging. It proposes to preventively segment the cyber infrastructure that charging station operators CSOs use to communicate with and control their charging stations, thereby limiting the impact of...

Gravity Falls: A Comparative Analysis of Domain-Generation Algorithm (DGA) Detection Methods for Mobile Device Spearphishing

Mobile devices are frequent targets of eCrime threat actors through SMS spearphishing smishing links that leverage Domain Generation Algorithms DGA to rotate hostile infrastructure. Despite this, DGA research and evaluation largely emphasize malware C2 and email phishing datasets, leaving limited...

Towards a Cognitive-Support Tool for Threat Hunters

Cybersecurity increasingly relies on threat hunters to proactively identify adversarial activity, yet the cognitive work underlying threat hunting remains underexplored or insufficiently supported by existing tools. Building on prior studies that examined how threat hunters construct and share...

Symbolic Execution in Practice: a Survey of Applications in Vulnerability, Malware, Firmware, and Protocol Analysis

Symbolic execution is a powerful program analysis technique that allows for the systematic exploration of all program paths. Path explosion, where the number of states to track becomes unwieldy, is one of the biggest challenges hindering symbolic execution's practical application. To combat this,...

Secure Goal-Oriented Communication: Defending against Eavesdropping Timing Attacks

Goal-oriented Communication GoC is a new paradigm that plans data transmission to occur only when it is instrumental for the receiver to achieve a certain goal. This leads to the advantage of reducing the frequency of transmissions significantly while maintaining adherence to the receiver's...