regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

GhostTrace

GhostTrace Encuentra lo que el software dejó atrás en Windows, antes de que regrese. GhostTrace es un cazador local de rastros forenses de Windows para respondedores de incidentes, administradores de sistemas y usuarios avanzados con mentalidad de seguridad. Mapea persistencia, ejecución, activid...

openclaw-hardening-check

本脚本仅执行读取操作。它不修复任何问题，也不保证您的安全。绿色输出仅表示下列检查已通过——仅此而已。 OpenClaw 加固检查 openclaw-hardening-check.mjs 是一个小型、无依赖、离线的 OpenClaw 安装审查工具。它会读取本地配置、包元数据、插件和技能清单、文件模式，以及在 Linux 上通过 /proc 读取正在运行的 Gateway 的条目。它不修改文件、不调用 OpenClaw 命令、不连接注册中心，也不发起任何网络请求。 检查内容 Gateway 绑定: 报告 gateway.bind 是仅回环地址、非回环地址还是运行时依赖。在检测到...

Oihk-pentesting

OIHK-pentesting OIHK-pentesting is an autonomous multi-agent engine for authorized security assessments. A root planner delegates to recon, discovery, attack Privesc, validation, and reporting agents — and the engine itself enforces scope, egress, evidence, and resource policy no matter which mod...

AlmaLinux 9.2 [TuxCare] Security Update: ipa-client / ipa-client-common / ipa-client-epn / ipa-client-samba / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1763391572)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763391572 advisory. - A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for...

Security Bulletin: IBM Documentation Offline may be vulnerable to TLS authentication bypass and authority rebinding due to Node.js (CVE-2026-48618, CVE-2026-48930)

Summary IBM Documentation Offline uses Node.js as its runtime environment. Node.js is affected by two vulnerabilities related to TLS hostname handling. CVE-2026-48618 involves improper handling of Unicode dot separators during TLS certificate verification, which could allow an attacker performing...

mini-shai-hulud-scanner

Mini Shai-Hulud Scanner 一个免费、离线的扫描器，用于检测当前正在吞噬主要软件包的 npm/PyPI 供应链蠕虫。由 Intrudify 团队开发。无需注册，无遥测，完全离线运行。 NHS CC-4781 · CVE-2026-45321 CVSS 9.6 · GHSA-g7cv-rxg3-hmpx 这是什么 如果你在过去几周内运行过 npm install 或 pip install，那么这与你相关。 特别是如果你接触过 @tanstack/、@uipath/、@mistralai/、@cap-js/，或者 PyPI 上的...

NextPass

🚀 NextPass 以隐私为核心的AI密码字典生成器。 NextPass 是一款专用的密码字典生成器，它结合了基于规则的逻辑与大语言模型来生成密码。专为安全研究人员设计，它提供离线生成功能，可在不联网的情况下生成密码字典，同时利用人工智能预测类似人类的密码模式，并对目标数据保持严格的隐私隔离。 🛡️ 隐私优先的 AI 架构 大多数 AI 工具会将敏感的的目标数据（姓名、生日、爱好）直接发送给 LLM，从而泄露这些信息。NextPass 通过以下方式解决此问题： 本地数据处理： 原始目标信息在本地处理，以保护敏感数据。 抽象提示： AI...

NetScope

NetScope Plataforma offline-first de investigación y respuesta de red para Windows. NetScope es una aplicación de escritorio para analistas de seguridad, respondedores de incidentes y jugadores de CTF. Toma una captura de paquetes .pcap / .pcapng o una interfaz en vivo y la convierte en una...

CVE-2026-97469

A flaw was found in PostgreSQL Anonymizer. An authenticated, unprivileged masked user can bypass access restrictions to execute restricted functions by embedding function calls within a subquery. By repeatedly invoking functions such as anon.hash, an attacker can collect output to deduce the...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight，离线复兴交接 本软件包包含一个可正常工作的 Transformers: Forged to Fight 离线启动版本，以及用于实现这一目标的所有工具、补丁和逆向工程笔记。它的设计目的是交给那些有时间和精力去迈出下一步（即从头重建游戏服务器端内容）的人。这里的所有内容都有文档记录，这样你就不必像我一样从零开始。 在动手之前，请先通读本文件。特别是“陷阱”部分，它将为你节省数天时间。 目前真正能用的功能...

CVE-2026-101089

Versions of Nezha before 2.2.7 are susceptible to an information disclosure vulnerability within the GET /api/v1/profile endpoint. This flaw allows authenticated users to retrieve their bcrypt-hashed password field. Because there are no rate limiting or audit trail constraints, an attacker can ex...

CVE-2026-101089 Nezha before 2.2.7 Information Disclosure via /api/v1/profile

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints...

CVE-2026-101089 Nezha before 2.2.7 Information Disclosure via /api/v1/profile

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints...

EUVD-2026-88024

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints...

CVE-2026-101089 Nezha before 2.2.7 Information Disclosure via /api/v1/profile

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints...

CVE-2026-101089: Insufficiently Protected Credentials

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints...

A2A-ForensicTrace: Offline Verification of Tamper-Evident A2A Runtime Evidence

Security-relevant Agent2Agent A2A executions can cross organizational boundaries, leaving investigators without live access to all participating systems. Offline investigation involves checking preserved records and their cross-record relationships for consistency. This paper presents...

CVE-2026-100719

Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure ...

EUVD-2026-87692

Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API users can retrieve bcrypt password hashes for protected-directory users, enabling offline cracking attempts and exposure ...