adexplorersnapshot-rs

ADExplorerSnapshot-rs 这是 ADExplorerSnapshot.py 的重写版本。输出用于导入的 BloodHound CE JSON 文件的 .tar.gz 压缩包。 请在使用前查看该项目的问题列表。它目前还不是一个可直接替代的版本。 安装 Linux 和 Windows 的预构建二进制文件发布在 releases 中。 用法 Usage: convertsnapshot OPTIONS Arguments: Input .dat file path Options: -o, --output Output .tar.gz file path -c,...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

nightHawkResponse

nightHawk Response 专为异步取证数据展示而构建的应用程序，基于 Elasticsearch 后端。 该应用程序旨在导入 Mandiant Redline "collections" 文件，并提供了灵活的搜索、堆叠和标记功能。 该应用的诞生源于无法在单一视图中控制多个调查（或数百个终端）的需求。 为了导入 Redline 审计数据，我们创建了 nightHawkResponse，这是一个完全成熟的 GOpher 应用程序，旨在配合此框架使用。该应用的源代码在此仓库中提供，已编译的二进制文件并运行在 ISO 中，从初次启动即可导入数据。 版本 2.0 - 预计 2020 年...

Malcolm

Malcolm Malcolm 是一套强大的网络流量分析工具套件，其设计目标如下： 易于使用 – Malcolm 接受全流量数据包捕获（PCAP）文件、Zeek 日志和 Suricata 告警等形式的数据。这些内容可通过简单的浏览器界面上传，或使用轻量级转发器进行被动实时捕获并转发至 Malcolm。无论采用哪种方式，数据都会被自动归一化、丰富化并关联以进行分析。 强大的流量分析能力 – 通过两个直观界面提供网络通信可见性：OpenSearch Dashboards（一个灵活的数据可视化插件，内置数十个预建仪表板，可概览网络协议）和...

flashingestor

flashingestor 一个用于 Active Directory 收集的 TUI 工具。 设计理念 该项目的主要目标是： 1. 成为一个完整的数据摄取器 ，兼容 BloodHound CE（社区版） 2. 比其他收集器更快、更安静、更可定制 3. 提供友好的 TUI（终端用户界面）并带有进度追踪 演示 实现细节 Flashingestor 实现了三个独立的基本步骤：LDAP 导入、远程收集 和 转换，而其他收集器则在单个步骤中运行指定的方法： 导入 Ctrl+l - 从 LDAP 收集原始对象属性数据，并将其存储在 output/ldap 下的中间 msgpack 文件中。查询可以...

CorelightForSecOps

收集 Corelight Sensor 日志 本文档介绍如何通过配置 Corelight Sensor 和 Chronicle 转发器来收集 Corelight Sensor 日志。本文档还列出了支持的日志类型和支持的 Corelight 版本。 有关更多信息，请参阅 将数据注入 Chronicle。 准备工作 验证 Corelight Sensor 的版本。Corelight Google SecOps 解析器是针对 27.13 及更早版本设计的。更高版本的 Corelight Sensor...

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

ShunyaNet-Sentinel

ShunyaNet Sentinel（更新于：2026年3月2日） ShunyaNet Sentinel 是一个轻量级的、赛博朋克主题的程序，它接收 RSS 订阅源（例如突发新闻、社交媒体），将其发送给 LLM 进行分析，并定期将警报和摘要报告直接发送到 GUI 和 Slack。 该项目旨在利用与同一台机器或网络（例如通过 Tailscale）上本地托管的 LLM，使用 LMStudio 或 Ollama（02/23 更新） 。它也适用于 OpenAI API 密钥（02/23 更新） 。 在警报方面，该程序使用 Slack Webhooks，能够将推送通知发送到移动设备。...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

Impact Deployments using event-driven updates in the Bitbucket Server catalog provider may ingest catalog locations from repositories that are excluded by the provider's configured project, repository, or archived-repository filters. An authenticated Bitbucket Server user who can push to a...

GHSA-GP6M-X9VW-5C5X Backstage has improper authorization in GitLab organizational user ingestion

Impact Deployments that enable GitLab organization event ingestion and rely on scoped catalog users as an access boundary may admit an unintended catalog identity. Depending on sign-in and permission configuration, this may allow unauthorized access with the permissions of a standard authenticate...

Backstage has improper authorization in GitLab organizational user ingestion

Impact Deployments that enable GitLab organization event ingestion and rely on scoped catalog users as an access boundary may admit an unintended catalog identity. Depending on sign-in and permission configuration, this may allow unauthorized access with the permissions of a standard authenticate...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in Apache Log4j

Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in Apache Log4j. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during...

CVE-2026-106463

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in gitlab organizational user ingestion. Deployments that enable GitLab organization event ingestion and rely on scoped...

CVE-2026-106463

The Backstage framework is vulnerable to improper authorization in the @backstage/plugin-catalog-backend-module-gitlab package prior to version 0.8.7 . The flaw occurs during GitLab organizational user ingestion ; deployments enabling GitLab organization event ingestion that rely on scoped catalo...

CVE-2026-106463 Backstage: Improper authorization in GitLab organizational user ingestion

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in gitlab organizational user ingestion. Deployments that enable GitLab organization event ingestion and rely on scoped...

PT-2026-107266

Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-gitlab versions prior to 0.8.7 Description Improper authorization exists during GitLab organizational user ingestion. Deployments that enable GitLab organization event ingestion and use scoped catalog...

CVE-2026-51385

CVE-2026-51385 CVE-2026-51385 的安全公告。需要发布它，因为 GRAPHIFY 既未识别该公告也未将其发布，而 MITRE 已分配 CVE-2026-51385，本文档即为该漏洞的公告。 ES: 这是我的第一个 CVE。说实话，我找到了一种破坏 ANTI SSRF 函数逻辑的方法，而且我真的很想发布我的第一个 CVE 所以我想了想它如何影响安全性以展示影响，尽管执行起来很复杂（在真实实例中发生这种情况很复杂，但有可能，因此其复杂度为 high）。我将其提交给 MITRE，他们接受了。这就是该公告。 EN: 这是我的第一个 CVE。说实话，我自己找到了破解...