Maryam

OWASP Maryam OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. Installation Supported OS Linux FreeBSD Darwin OSX root@kitploit: $ pip insta...

combobulator

Dependency Combobulator Dependency Combobulatorは、依存関係の混乱による漏洩や潜在的な攻撃を検出・防止するためのオープンソースでモジュール式かつ拡張可能なフレームワークです。これにより、異なるソース（例：GitHub Packages、JFrog Artifactory）や多くのパッケージ管理方式（例：npm、maven）に対して評価可能な、安全なアプリケーションリリースを確保するための総合的なアプローチを促進します。 対象読者...

KITT-Lite

KITT Penetration Testing Framework - Versione Lite Non più mantenuta, potrebbe necessitare di alcune modifiche per funzionare Il KITT Penetration Testing Framework è stato sviluppato come soluzione open source per pentester e programmatori per compilare gli strumenti che usano con ciò che conosco...

buttinsky

Buttinsky Open-Source-Botnet-Überwachung Beschreibung Botnet-Überwachung ist ein entscheidender Bestandteil der Bedrohungsanalyse und wird aufgrund fehlender geeigneter Open-Source-Tools oft vernachlässigt. Unser Tool bietet ein Open-Source-Framework für automatisierte Botnet-Überwachung. Das...

pocsploit

pocsploit 中文 README pocsploit è un framework di verifica POC open source, leggero, flessibile e innovativo Punti critici del framework POC sul mercato 1. Ci sono troppi parametri, non so da dove iniziare, ma solo alcuni sono comunemente usati...

social-engineer-toolkit

The Social-Engineer Toolkit SET Il Social-Engineer Toolkit è un framework open-source per test di penetrazione, progettato per valutazioni autorizzate di ingegneria sociale. SET fornisce vettori d'attacco guidati per team di sicurezza che necessitano di testare la consapevolezza degli utenti,...

barf-project

BARF : Framework di Analisi Binaria e Reverse Engineering L'analisi del codice binario è un'attività cruciale in molte aree dell'informatica e dell'ingegneria del software, che vanno dalla sicurezza del software all'analisi dei programmi fino al reverse engineering. L'analisi binaria manuale è un...

trappsec

trappsec trappsec è un framework open-source che aiuta gli sviluppatori a rilevare gli attaccanti che sondano la logica di business delle API. Incorporando percorsi esca realistici e campi di miele difficili da distinguere dalle vere costruzioni API, gli attaccanti vengono spinti ad autenticarsi ...

cynative

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning through GitHub, GitLab,...

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

rita

RITA Real Intelligence Threat Analytics Se trovi utile RITA e desideri fare un passo avanti con automazione della caccia, visualizzazioni futuristiche e arricchimento dei dati, dai un'occhiata a AC-Hunter. Offerto da Active Countermeasures. Sponsorizzato da BHIS. RITA è un framework open source p...

turbinia

Turbinia सारांश नोट: Turbinia अब नई सुविधाएँ विकसित नहीं करेगा और रखरखाव मोड में है। उपयोगकर्ताओं कोOpenRelik पर एक नज़र डालनी चाहिए। Turbinia एक ओपन-सोर्स फ्रेमवर्क है जो वितरित फोरेंसिक कार्यभार को तैनात करने, प्रबंधित करने और चलाने के लिए है। इसका उद्देश्य सामान्य फोरेंसिक प्रसंस्करण उपकरणों...

pocsploit

pocsploit 中文 README pocsploit is a lightweight, flexible and novel open source poc verification framework Pain points of the POC framework in the market 1. There are too many params, I don't know how to get started, but only some of them are commonly used...

CVE-2026-54568 Microsoft UFO: Missing Authorization in DEVICE_INFO_REQUEST Allows a DEVICE Client to Read Another Device's system_info

Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a client connected to the UFO WebSocket server as a DEVICE could call DEVICEINFOREQUEST with another device's targetid and receive that device's server-side systeminfo through...

Fission 安全漏洞

Fission is an open-source function deployment framework based on Kubernetes. Versions of Fission prior to 1.23.0 contain security vulnerabilities. These vulnerabilities stem from the runtime Pod using the fission-fetcher ServiceAccount and automatically mounting tokens. User function code can rea...

CVE-2026-45776 Open XDMoD has Broken Access Control via Client-Controlled Session Variable

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request that sets a session variable used for authorization decisions. If an installation of Open XDMoD...

EUVD-2026-32675

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's WebSocket control plane trusts client-supplied identity and role fields in task messages. A client connection can register as a normal device, but later send a TASK...

UserSpice 安全漏洞

UserSpice is an open-source PHP framework for user management and identity authentication. Version 4.3.24 of UserSpice contains a security vulnerability that stems from username enumeration. This vulnerability could allow unauthenticated attackers to discover valid usernames by sending POST...

inngest-js 信息泄露漏洞

Inngest-js is an open-source framework developed by Inngest, designed to support various serverless platforms. It serves as a reliable event-driven and background task execution framework. Versions 3.22.0 to 3.53.1 of Inngest-js contain a vulnerability related to information leakage. This...