gtfobins-cli

🚀 GTFOBins CLI Descripción general GTFOBins CLI es una interfaz de línea de comandos para GTFOBins, que proporciona acceso instantáneo a técnicas de explotación de binarios Unix. Esta herramienta ayuda a profesionales de seguridad y administradores de sistemas a identificar y comprender cómo se...

mbadanoiu

Bienvenido al Retiro de Fin de Semana de Matei "Mal" Badanoiu Este GitHub se utiliza para publicar mis CVEs e investigación de seguridad durante mi tiempo libre/fines de semana. Todos los materiales presentes en este perfil de GitHub están destinados a la investigación de seguridad y al hacking...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

hacker-container

Hacker Container Contenedor con la lista completa de herramientas/comandos útiles para auditar clústeres de Kubernetes. Lea más al respecto en la publicación del blog https://blog.madhuakula.com/hacker-container-for-kubernetes-security-assessments-7d1522e96073 La lista de...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

CVE-2026-92081 fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a response trailer via reply.trailer and is served over HTTP/2, fastify unconditionally sets the Transfer-Encoding: chunked header, which is forbidden on HTTP/2, so Node.js throws while...

EUVD-2026-80315

fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a response trailer via reply.trailer and is served over HTTP/2, fastify unconditionally sets the Transfer-Encoding: chunked header, which is forbidden on HTTP/2, so Node.js throws while...

CVE-2026-92081 fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a response trailer via reply.trailer and is served over HTTP/2, fastify unconditionally sets the Transfer-Encoding: chunked header, which is forbidden on HTTP/2, so Node.js throws while...

CVE-2026-92081

fastify (a Node.js web framework) versions before 5.12.5 are vulnerable to a Denial of Service when a route registers a response trailer via reply.trailer() and is served over HTTP/2 . The root cause is that fastify unconditionally sets the Transfer-Encoding: chunked header, which is forbidden on...

log4shell-rex

Log4Shell-Rex La siguiente RegEx fue escrita en un intento de coincidir con indicadores de una explotación de Log4Shell CVE-2021-44228 y CVE-2021-45046. Si ejecutas una versión anterior a 2021/12/21, se recomienda encarecidamente probar y actualizar. He eliminado algunas peculiaridades y mejorado...

CVE-2026-2380 Security Advisory 0168

On affected platforms running Arista EOS with OpenConfig-related services i.e., gNMI, gNSI, RESTCONF and NETCONF, sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming vi...

CVE-2026-2380

CVE-2026-2380 affects Arista EOS when OpenConfig-related services (gNMI, gNSI, RESTCONF, or NETCONF) are enabled. The OpenConfig/Octa agent may unintentionally log sensitive requests and responses—such as CLI commands containing passwords or OpenConfig YANG secret-key leafs—to local agent logs or...

EUVD-2026-80313

On affected platforms running Arista EOS with OpenConfig-related services i.e., gNMI, gNSI, RESTCONF and NETCONF, sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming vi...

CVE-2026-2380 Security Advisory 0168

On affected platforms running Arista EOS with OpenConfig-related services i.e., gNMI, gNSI, RESTCONF and NETCONF, sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming vi...

CVE-2026-33147

CVE-2026-33147 CVE-2026-33147Stack-based Buffer Overflow in gmtremotedatasetid Summary A stack-based buffer overflow vulnerability was identified in the gmtremotedatasetid function within src/gmtremote.c. This issue occurs when a specially crafted long string is passed as a dataset identifier e.g...

openqore

openqore un kit de herramientas de código abierto para parchear, modificar y mejorar el firmware de los auriculares soundcore de la serie q, con soporte planificado para otros modelos en el futuro. nota: este proyecto es mi viaje personal hacia el mundo de la ingeniería inversa de hardware y los...

iox

iox Inglés | 中文 Herramienta para reenvío de puertos y proxy de intranet, al igual que lcx/ew, pero mejor ¿Por qué escribir? lcx y ew son geniales, pero se pueden mejorar. Cuando los usé por primera vez, no podía recordar durante mucho tiempo estos parámetros complicados, como tran, slave, rcsocks...

AperiSolve

Aperi'Solve Pruébalo ahora: https://www.aperisolve.com Apoya a Aperi'Solve: Aperi'Solve es una plataforma web de esteganálisis de código abierto que realiza análisis automatizados sobre imágenes para detectar y extraer datos ocultos mediante herramientas y técnicas de esteganografía comunes...

clients

Aplicaciones cliente de Bitwarden Este repositorio alberga todas las aplicaciones cliente de Bitwarden excepto las aplicaciones móviles iOS | android. Consulta la sección de Clientes de la Documentación de contribución para obtener instrucciones de compilación, herramientas recomendadas, consejos...

KubeStalk

KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. Usage The GIF belo...