vault-conductor

🗝️ vault-conductor 一个 SSH Agent，用于提供以密钥形式存储在 Bitwarden Secrets Manager 中的 SSH 密钥。 支持 SSH 认证和 Git 提交签名。 演示 功能特性 它以 Unix 域套接字服务器形式实现 SSH Agent 协议，作为你的 SSH 客户端与 Bitwarden Secrets Manager 之间的安全桥梁。 其特性包括： Agent 生命周期 ：以守护进程（后台）或前台进程方式运行，监听位于 /tmp/vc-$whoami-ssh-agent.sock 的 Unix 套接字 密钥懒加载 ：SSH 密钥仅在请求时通过...

age

-man%20page-lightgrey%3E age es una herramienta de cifrado de archivos, un formato y una biblioteca Go simples, modernos y seguros. Cuenta con claves explícitas pequeñas, soporte post-cuántico, sin opciones de configuración y componibilidad al estilo UNIX. root@kitploit: $ age-keygen -o key.txt...

securesystemslib

securesystemslib Securesystemslib es una interfaz de criptografía para firmar y verificar firmas digitales. Está desarrollado para los proyectos TUF e in-toto: los contenedores de claves y firmas son compatibles con los formatos de metadatos de esos proyectos. Internamente, Securesystemslib puede...

Bastillion

Bastillion 一款现代化的、基于 Web 的 SSH 控制台和 SSH 密钥管理工具。 Bastillion 为你提供了一种简洁的、基于浏览器的方式来管理所有系统上的 SSH 访问——就像一个带有友好仪表盘的堡垒机。它做两件事： 1. 基于 Web 的 SSH 终端 ——主机注册后，授权用户可以直接从浏览器打开一个或多个实时终端会话，命令可以选择性地同时广播到所有打开的会话（可以想象成 tmux 的同步窗格，只不过面对的是远程主机集群，而不是本地窗格）。 2. SSH 密钥管理 ——Bastillion 持有自己的 SSH...

kodex

Kodex 社区版 - CE 是一个面向隐私与安全工程 的开源工具包。它帮助你在数据工程工作流中自动化数据安全与数据保护措施。它提供以下功能： 从文件、数据库或消息队列等各类来源读取数据项。 使用多种隐私与安全增强变换（如去标识化、掩码、假名化、匿名化或加密）保护这些数据项。 将保护后的数据项发送到各类目标。 借助 Kodex，你可以用简单的声明式配置语言描述你的数据保护与数据安全工作流：正如 DevOps 工具让你将基础设施描述为代码，Kodex 是一个 PrivacyOps 和 SecurityOps 工具，让你将隐私与安全措施描述为代码 。 Kodex...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

CVE-2017-5487

CVE-2017-5487 es una vulnerabilidad en el kernel de Linux que fue descubierta y divulgada en 2017. La vulnerabilidad permite a un atacante local obtener acceso root a un sistema explotando una condición de carrera en el subsistema de gestión de claves del kernel. La vulnerabilidad puede ser...

Pribado

🔐 Pribado Gestión Privada de Claves API e Infraestructura de Conocimiento Cero Pribado es una plataforma auto-alojable y de conocimiento cero para gestionar claves API, secretos cifrados y comunicaciones privadas. Construido sobre Oasis Sapphire para computación confidencial respaldada por...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

rust_citadel

Citadel 后量子混合加密与密钥管理服务器。 Citadel 结合了 X25519 + ML-KEM-768 进行密钥封装，并使用 AES-256-GCM 进行数据加密，遵循 NIST 为后量子过渡提出的混合方法。应用程序通过 REST API 进行加密和解密。Citadel 负责管理密钥——包括生成、轮换、撤销、访问控制和审计日志记录。 状态: 功能实现。未经审计。无生产部署。请参阅下面的安全说明。 功能概述 root@kitploit: Your Application Citadel Database | | | |-- POST /encrypt -------| | | |...

terrapod-PoC

Terrapod: aviso de seguridad Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-6qrc-597p-mrp9. Tras la asignación del CVE, este repositorio se renombra CVE-YYYY-NNNNN-terrapod-PoC y este banner se reemplaza con el enlace del CVE. | ---|--- Investigador|...

CVE-2025-56802

CVE-2025-56802 Vulnerabilidad de generación y gestión de claves AES-CFB en la aplicación de escritorio de Reolink 1. Resumen Nombre : Aplicación de escritorio de Reolink Versión : 8.18.12 Vendedor : Reolink CWE : CWE-321: Uso de clave criptográfica codificada, CWE-522: Credenciales...

Bastillion v5.2.1

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

The vulnerability of the keyctl_pkey_params_get_2() function in the security/keys/keyctl_pkey.c module of the Linux kernel’s key management component allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the keyctlpkeyparamsget2 function in the security/keys/keyctlpkey.c module, a component of the Linux kernel’s key management framework, is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise...

PT-2026-85727

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of current key on reconnect to another peer tcp inbound ao hash is called before bh lock sock nested is taken, with only rcu read lock held. On the fast path for established sockets, if the rnext...

[SECURITY] Fedora 44 Update: python-pynitrokey-0.12.3-4.fc44

A command line interface for the Nitrokey FIDO2, Nitrokey Start, Nitrokey 3 and NetHSM. Includes commands for managing enrolled keys, opening encrypted storage, and generating OTPs...

EUVD-2026-66586

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

UBUNTU-CVE-2026-80520

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...