zombieguard

ZombieGuard 一款用于检测 ZIP 压缩包中结构元数据规避行为的防御性扫描器。 ZombieGuard 检测 ZIP 本地文件头、中央目录记录与负载特性之间的矛盾。这些矛盾可用于让压缩包内容对一个解析器显示为空或无害，而另一个解析器仍能访问到负载。 它结合了一个有界 ZIP 解析器与一个小型 LightGBM 模型。它不会解压或执行压缩包内容。 !IMPORTANT ZombieGuard 检测的是压缩包规避信号，而非恶意软件。干净的结果并不能证明压缩包内的文件是安全的。 60 秒快速上手 ZombieGuard 支持 Python 3.11 和 3.12。...

4-ZERO-3

简介 4-ZERO-3 用于绕过403/401的工具。此脚本包含所有可能的绕过技术。 注意 ：如果在输出中看到多个200 Ok/绕过结果，你必须检查Content-Length。如果多个200 Ok/绕过结果的Content-Length相同，则意味着误报。原因可能是"301/302"或"../" Payload 不要惊慌。 如果发现可能的绕过，脚本将打印cURL PAYLOAD。 预览 帮助 root@kitploit: root@medheeraj:$ bash 403-bypass.sh -h 用法/模式 使用特定载荷扫描： --header 支持基于HEADER的绕过/载荷...

tanstack-compromise-checker

tanstack-compromise-checker 检测开发者机器、仓库或CI运行器上TanStack npm供应链攻击的指标。提供Bash脚本、Docker镜像和GitHub Action三种入口，共享同一检测引擎。 CVE-2026-45321 /GHSA-g7cv-rxg3-hmpx 2026年5月11日，攻击者通过GitHub Actions缓存投毒，在42个@tanstack/包中发布了84个恶意版本。该载荷窃取GitHub令牌、npm令牌、AWS/GCP/Azure凭证，并安装了一个死亡开关 守护进程，一旦被窃取的令牌被撤销，就会立即清空/目录。 快速开始...

RLSA-2026:66392 Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images a...

RLSA-2026:66336 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via out-of-bounds write in terminal handling CVE-2026-52859 vi...

RLSA-2026:66349 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...

apr-util security update

An update is available for apr-util. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mission of the Apache Portable Runtime APR is to provide a free library...

gstreamer1-plugins-base security update

An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, release...

RLSA-2026:66432 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

RLSA-2026:66355 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

RLSA-2026:66460 Moderate: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in...

vim security update

An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

secator

渗透测试者的瑞士军刀。 功能 • 支持的命令 • 安装 • 用法 • 文档 • 加入我们的 Discord！ secator 是一个用于安全评估的任务和工作流运行器。它支持数十种知名安全工具，旨在提高渗透测试人员和安全研究人员的工作效率。 功能 精选命令列表 统一输入选项 统一输出模式 CLI 和库使用 基于 Celery 的分布式选项 从简单任务到复杂工作流的灵活性 可定制 支持的工具 secator 集成了以下工具： 欢迎通过提交 Issue 请求添加新工具，但请先确认该工具符合我们的选择标准。如果不符而您仍希望将其集成到 secator 中，您可以自行接入（请参阅开发指南）。 安装...

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

jadx-ai-mcp

JADX-AI-MCP（Zin MCP Suite 的一部分） ⚡ 全自动 MCP 服务器 + JADX 插件，通过 MCP 与 LLM 通信，使用 Claude 等 LLM 分析 Android APK — 轻松发现漏洞、分析 APK 并进行逆向工程。 ⭐ 贡献者 感谢这些出色的贡献者 ⭐ ljt270864457 | p0px | bx33661 | Haicaji | !https://assets.kitploit.com/production/pub...