security-operations-labs

مختبرات عمليات الأمن نظرة عامة يجمع هذا المستودع أعمال الأمن الدفاعي من سياق أكاديمي في صيغة أعيدت صياغتها من أجل قابلية التتبع العام. ينصب التركيز على المنهجية، والمختبرات القابلة للتكرار، والتحقق، وحدود الإجراءات المطورة – وليس نشر مواد الدورة التدريبية. المشاريع المضمنة...

CVE

CVE Una raccolta di script exploit proof-of-concept scritti dal team di STAR Labs per varie CVE che hanno scoperto o che sono state trovate da altri. CVE-2026-53264 Bersaglio: Linux Kernel Versione: kernel CentOS 9 versione 5.14.0-721 Exploit scritto da: Lee Jia Jie CVE-2025-29824 Bersaglio:...

CVE-2024-55591

FortiGate CVE-2024-55591 1Scan neueste Version https://github.com/0x7556/1Scan Betroffene Versionen root@kitploit: FortiOS 7.0.0 bis 7.0.16 FortiProxy 7.0.0 bis 7.0.19 FortiProxy 7.2.0 bis 7.2.12 POC Einzelprüfung root@kitploit: ./poc 10.10.1.1 ./poc http://10.10.1.1 1Scan Batch root@kitploit:...

Sigma

Sigma-Regeln Eine Sammlung von Sigma-Regeln, entwickelt bei Huntress Labs Twitter: https://twitter.com/embeeresearch https://twitter.com/HuntressLabs Lizenz Die Regeln sind im Wesentlichen ohne Einschränkung kostenlos nutzbar, sofern eine angemessene Nennung Autor/Inhaber usw. beibehalten wird...

malware-samples

malware-samples Una raccolta di campioni di malware e relative informazioni di analisi, molto probabilmente citati da http://blog.inquest.net o https://twitter.com/inquest. Assicurati di dare un'occhiata anche alla sezione Deep File Inspection DFI di https://labs.inquest.net per un'interfaccia...

labs-releases

Elastic Security Labs - Releases Dieses Repository ist die Heimat von Tools, Konfigurationsextraktoren und anderen Beiträgen für die Infosec-, Threat-Hunting-, Malware-Forschungs- und Intelligence-Analyse-Community. Bei Elastic glauben wir, dass Offenheit und Transparenz für den Erfolg von uns un...

Awesome-CloudSec-Labs

Fantastici laboratori di sicurezza cloud Un elenco di laboratori gratuiti per imparare la sicurezza cloud native. Include CTF, workshop self-hosted, laboratori guidati sulle vulnerabilità e laboratori di ricerca. Ordinati per tecnologia e categoria Nome| Tecnologia| Categoria| Autore| Note...

CVE-2026-55678

creationtimestamp| type| source ---|---|--- 2026-08-28 21:31:53+00:00| seen| https://gist.github.com/alon710/f6616451da7f3f1b989952d24a3d867c 2026-08-28 22:35:03+00:00| published-proof-of-concept| https://github.com/Basekick-Labs/arc/security/advisories/GHSA-p378-jp5r-gpgw...

CVEs

Exploits de Prova de Conceito de CVE da Rhino Uma coleção de scripts de exploit de prova de conceito escritos pela equipe do Rhino Security Labs para várias CVEs. CVE-2025-32815: Bypass de Autenticação no Infoblox NetMRI via Credenciais Embutidas CVE-2025-32814: Injeção de SQL Não Autenticada no...

python-inquestlabs

EINGESTELLT November 2025 inquestlabs Eine Pythonic-Schnittstelle und ein Befehlszeilenwerkzeug für die Interaktion mit der InQuest Labs API. Beachten Sie, dass für die Interaktion mit dieser API kein API-Schlüssel erforderlich ist. Ein API-Schlüssel bietet jedoch die Möglichkeit, den Lookback zu...

ioc

IoC IoCs de Inteligência de Ameaças + pedaços e fragmentos de matéria escura. Publicado por Gen Threat Labs. Licenças O conteúdo deste repositório é disponibilizado sob a Detection Rule License DRL 1.1...

Frida-Labs

Questo repository contiene una serie di sfide progettate per imparare Frida per Android. Non sono applicazioni hardcore del tipo Capture The Flag CTF, ma ti aiuteranno a iniziare con Frida e le sue API più comuni. Se sei completamente nuovo a Frida, questo è il repository perfetto per iniziare. H...

ssllabs.rb

ssllabs.rb Ruby gem per il test del server Qualys SSL Labs. Note sull'API Tutti gli oggetti API descritti nella documentazione dell'API SSL Labs sono esposti come oggetti ruby nativi. Per le proprietà si usano nomi "underscore", ad esempio endpoint.hoststarttime restituirà il campo hostStartTime...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | | | |\ . / |/ ./ | | :/ | | || :/ :/ | | : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Gemäß den Bedingungen des Vertrags...

NSD -- multiple vulnerabilities

NLnet Labs reports: CVE-2026-18664: IP range access control restrictions are bypassed for some unintended IP. Reported by Qifan Zhang from Palo Alto Networks, Claude and Ada Logics. CVE-2026-18916: Any remote client can denial TCP service by throttling the TCP receive window down to 1. Reported b...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104805 advisory. In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104806 advisory. In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled set to any value greater than zero, glue records of 0.0.0.0/::0...

EUVD-2026-65467

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

CVE-2026-12600 Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

K000163001: NLnet Labs Unbound vulnerability CVE-2026-42923

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does not take into account the limit on NSEC3 hash calculations introduced in 1.19.1. This leads to...