chaos-operator

Litmus chaos-operator for injecting chaos experiments on Kubernetes Codacy Badge Litmus chaos operator is used by Kubernetes application developers and SREs to inject chaos into the applications and Kubernetes infrastructure in a managed fashion. Its objective is to make the process of validation...

BackupOperatorToolkit

BackupOperatorToolkit Uso El BackupOperatorToolkit BOT tiene 4 modos diferentes que permiten escalar de Operador de Respaldo a Administrador de Dominio. Ejecute "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" antes de ejecutar la herramienta. Modo Servicio El modo SERVICIO crea...

GeckoDroid

GeckoDroid Mobile client for Adaptix C2 Framework. Full operator access from your Android device. What it does GeckoDroid gives you control over your Adaptix C2 server from anywhere. Instead of sitting at your desktop client, you can manage operations on the go. Agents - See all connected agents...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – SQLite FTS3 Match Infoleak via Query Crafting Program Code Python sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO secrets VALUES...

atomic-operator

license atomic-operator Este paquete de Python se utiliza para ejecutar pruebas de Atomic Red Team Atómicas en múltiples entornos de sistemas operativos. ¿Qué hay de nuevo? ¿Por qué? atomic-operator permite a los profesionales de seguridad probar sus capacidades de detección y defensa contra las...

nebula

Nebula AI Powered Pentesting Nebula 3 Assistant with a sample assessment conversation Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop...

EUVD-2026-95335

Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another...

starboard

Starboard se une a Trivy. Hemos anunciado nuestros planes de discontinuar Starboard y fusionarlo con Trivy. La CLI de Starboard se ha reintroducido como el comando trivy kubernetes y starboard-operator con un enfoque en las capacidades de trivy está disponible como Trivy-Operator. No aceptaremos...

renovate-operator

Renovate: la forma nativa de Kubernetes Ejecuta Renovate en tu propia infraestructura con programación basada en CRD, ejecución en paralelo, autodescubrimiento y una interfaz de usuario integrada. Si autoalojas Renovate y ya ejecutas Kubernetes, este operador te brinda el control y la...

backup_dc_registry

Copia de seguridad del registro de Backup Operator para comprometer el dominio Un POC simple que abusa de los privilegios de Backup Operator para volcar de forma remota las hives SAM, SYSTEM y SECURITY. Créditos de la investigación: @filipdragovic Portado del PoC de Windows de @mpgn Uso Esta prue...

sliver-gui

Sliver GUI Una consola de operador de escritorio para el framework Sliver C2 en el espíritu de Cobalt Strike y Havoc. Diseñada y desarrollada por Raj Kumar Mullapudi Sliver GUI es un frontend ligero de Wails v2 Go + HTML/CSS/JS plano sobre el servicio gRPC rpcpb.SliverRPC existente de Sliver. No...

Fortigate-SSL-VPN-Exploit-Kit

FortiGate SSL-VPN kit recovered in the wild Research archive. Recovered as found. I did not write these files. Released: 1 September 2026 This repository is the orchestrator, second-stage payloads, and operator listeners that sit on top of a per-SKU FortiGate SSL-VPN exploit catalog. The long-for...

trivy-operator

Kit de herramientas de seguridad nativo de Kubernetes. Documentación Introducción Trivy Operator aprovecha Trivy para escanear continuamente tu clúster de Kubernetes en busca de problemas de seguridad. Los escaneos se resumen en informes de seguridad como Custom Resource Definitions de Kubernetes...

freebsd-CVE-2026-7270

Ref https://github.com/califio/publications/tree/main/MADBugs/freebsd-CVE-2026-7270 CVE-2026-7270 FreeBSD local privilege escalation viaexecargsadjustargs OOB memmove An operator-precedence bug in execargsadjustargs sys/kern/kernexec.c, present since 2013 lets any local user escalate to root on a...

trivy-enforcer

trivy-enforcer EXPERIMENTAL Operador de Kubernetes para el aseguramiento de imágenes Funciona como Controlador de admisión Evita que se desplieguen imágenes inseguras Controlador personalizado Observa el CRD ImageVulnerability y escanea la imagen en el recurso personalizado automáticamente...

CVE-2026-93017

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

CVE-2026-93017

The insights-operator contains a security misconfiguration where the insights-operator-gather ClusterRole grants the gather service account excessive permissions. Specifically, it allows read access (get, list) to secrets in the core API group without any namespace or resource names restrictions....

EUVD-2026-95030

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

CVE-2026-93017 Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...

CVE-2026-93017

The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref:...