vger

V'ger V'ger es una aplicación interactiva de línea de comandos para la post-explotación de instancias Jupyter autenticadas, centrada en operaciones de seguridad de IA/ML. Historias de Usuario Como Red Teamer , has encontrado credenciales de Jupyter, pero no sabes qué puedes hacer con ellas. V'ger...

ThreatHunting-JupyterNotebooks

🟣 Weekly Purple Team - Threat Hunting Notebooks A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook provides detection logic to help security professionals understand both offensive techniques and defensive...

publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| Home Assistant Authenticated Arbitrary File Read vi...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

msticpy

Herramientas de Seguridad en Python y Jupyter de MSTIC Herramientas de Seguridad en Python de Microsoft Threat Intelligence. msticpy es una biblioteca para investigación y caza en ciberseguridad en Jupyter Notebooks. Incluye funcionalidad para: consultar datos de registros de múltiples fuentes...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...

HELK

HELK El Hunting ELK o simplemente HELK es una de las primeras plataformas de caza de código abierto con capacidades avanzadas de análisis, como lenguaje declarativo SQL, gráficos, streaming estructurado e incluso aprendizaje automático a través de Jupyter notebooks y Apache Spark sobre una pila...

CVE-2025-40536-Analysis

CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...

DevHub-HTB-Walkthrough

DevHub – HTB Walkthrough Medium Linux Machine: DevHub Difficulty: Medium OS: Linux Topics: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root Privilege Escalation 📌 1. Reconnaissance root@kitploit: nmap -sC -sV devhub.htb Result: root@kitploit: Port 22 SSH Port 80 HTTP Port 6274 MCPJam...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of Concept Tool 🛠 About This Application This tool shows a technical proof of concept PoC for the security issue CVE-2026-2472. The issue affects the Vertex AI Python SDK from Google Cloud Platform. It relates to an unauthenticated and...

memOptix

memOptix Este notebook Jupyter foi criado para auxiliar profissionais de DFIR na triagem de dumps de memória do Windows. Observe que este notebook foi criado com base na saída gerada pelo script Python Supermem da CrowdStrike https://github.com/CrowdStrike/SuperMem. O modo de triagem 2 ou 3 do...

RITA-J

RITA Real Intelligence Threat Analytics no Jupyter Notebook RITA é uma estrutura de código aberto para análise de tráfego de rede patrocinada pela Active Countermeasures RITA-J é a implementação dos recursos do RITA em Jupyter Notebook. O objetivo é suportar todos os tipos de logs de...

CitrixNetscalerAnalysis

Notebook di Analisi Citrix Un notebook Jupyter per aiutare ad automatizzare parte dell'analisi forense relativa agli host Citrix Netscaler compromessi tramite CVE-2019-19781. Per assistenza nel recupero degli artefatti da esaminare, consulta questo script di triage Citrix. Tutti i...

OPENSUSE-SU-2026:11634-1 jupyter-jupyterlab-4.5.10-1.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-4.5.10-1.1 package on the GA media of openSUSE Tumbleweed...

susvibes-jupyter-server-cve-2026-35397

SusVibes-Benchmark-Aufgabe: Pfadauflösung des Jupyter-Server-Inhaltsverzeichnisses Dieses Repository enthält eine vollständige SusVibes-ähnliche Benchmark-Aufgabe, die aus einem echten Python-Sicherheitsfix im Jupyter Server erstellt wurde. Die Aufgabe soll bewerten, ob ein Agent die maskierte...

Astra Linux – Vulnerability in jupyter-core

Jupyter Core is a package for the core common functionalities of Jupyter projects. Prior to version 4.11.2, Jupyter Core contained an arbitrary code execution vulnerability in “jupytercore,” which stemmed from “jupytercore” executing untrusted files in the CWD environment. This vulnerability...

CVE-2026-75060

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...

CVE-2026-75060

JetBrains PyCharm versions prior to 2026.2.1 are vulnerable to unauthenticated remote code execution through Jupyter MCP (Model Context Protocol) tools. MCP is a standard that allows AI models to access data and tools from external sources; in this case, the Jupyter MCP tools in PyCharm could be ...

CVE-2026-75060

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...