owLSM

🛡️ owLSM aspires to become the gold standard for prevention and detection for Linux 🛡️ owLSM is an eBPF LSM agent that implements a stateful Sigma rules engine focused on prevention. What is the project: owLSM focuses on three main things: 1 Prevention capabilities using a Sigma Rules Engine...

safeshell

safeshell Prevent PHP vulnerabilities similar to CVE-2016-10033 and CVE-2016-10045...

LOLDrivers

LOLDrivers - Living Off The Land Drivers 🚗💨 Welcome to LOLDrivers Living Off The Land Drivers, an exciting open-source project that brings together vulnerable, malicious, and known malicious Windows drivers in one comprehensive repository. Our mission is to empower organizations of all sizes with...

spamscanner

Spam Scanner is the best anti-spam, , and service...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

tirreno

tirreno tirreno is a security framework. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse...

SharpHose

Overview SharpHose is a C password spraying tool designed to be fast, safe, and usable over Cobalt Strike's execute-assembly. It provides a flexible way to interact with Active Directory using domain-joined and non-joined contexts, while also being able to target specific domains and domain...

VibeSec-Skill

VibeSec-Skill Stop vibe coding vulnerabilities into production. An AI skill that brings 5+ years of bug bounty hunting experience directly into your AI coding workflow - so LLM models write secure code from the start. Introduction Vibe coding is fun until your app ends up on social media for all...

bluemonday

bluemonday bluemonday 是一个用 Go 实现的 HTML 净化器。它速度快且高度可配置。 bluemonday 将不受信任的用户生成内容作为输入，并返回已根据一份经批准的 HTML 元素和属性的允许列表进行净化后的 HTML，从而使你可以安全地将这些内容包含在你的网页中。 如果你接受用户生成的内容，并且你的服务器使用 Go，那么你需要 bluemonday。 用于用户生成内容的默认策略（bluemonday.UGCPolicy.Sanitize）会将下面这个： root@kitploit: Hello...

Ironsquirrel

IRONSQUIRREL This project aims at delivering browser exploits to the victim browser in an encrypted fashion. Ellyptic-curve Diffie-Hellman secp256k1 is used for key agreement and AES is used for encryption. By delivering the exploit code and shellcode to the victim in an encrypted way, the attack...

CVE-2023-22960

PoC for CVE-2023-22960 Details PoC for CVE-2023-22960 that I discovered. This vulnerability allows an attacker to bypass the credentials brute-force prevention mechanism of the Embedded Web Server interface of all Lexmark printer models that have a firmware version released before 01/2023. This...

DonPwner

🔥 DonPwner - Advanced DonPAPI Analysis & Attack Tool Advanced Password Spray & Credential Analysis Tool - Leveraging DonPAPI with Smart Delay & Jitter Features • Installation • Usage • Examples • Configuration • License 🎯 About DonPwner is an advanced penetration testing tool that revolutionizes...

protections-artifacts

保护制品 Elastic Security 阻止勒索软件和恶意软件，检测高级威胁，并为响应者提供关键上下文。它免费且开放，适用于每一个端点。 Protections-Artifacts 是我们检测逻辑（规则、yara 等）的家，适用于 Elastic Security for endpoint。在 Elastic，我们相信开放和透明对我们和用户的成功至关重要。如果您对更多背景感兴趣，请查看我们的博客文章。 目录 下面您将看到我们在此仓库中开放的制品： 文件夹| 描述 ---|--- behavior/| 基于 EQL 的恶意行为规则 yara/| 用于恶意软件保护的 Yara 规则...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

owasp-java-encoder

OWASP Java Encoder Project Contextual Output Encoding is a computer programming technique necessary to stop Cross-Site Scripting. This project is a Java 1.8+ simple-to-use drop-in high-performance encoder class with little baggage. For more detailed documentation on the OWASP Java Encoder please...

wazuh

Wazuh Wazuh 是一个免费开源平台，用于威胁预防、检测和响应。它能够保护本地部署、虚拟化、容器化和基于云的环境中的工作负载。 Wazuh 解决方案由一个端点安全代理（部署到受监控系统）和一个管理服务器（收集并分析代理所采集的数据）组成。此外，Wazuh 与 Wazuh Indexer 完全集成，提供搜索引擎和数据可视化工具，使用户能够浏览其安全告警。 Wazuh 功能 简要介绍 Wazuh 解决方案的一些常见用例。 入侵检测 Wazuh 代理会扫描受监控系统，查找恶意软件、rootkit...

snort3

Snort++ Snort 3 是下一代 Snort IPS（入侵防御系统）。本文件将向您展示 Snort++ 所提供的新功能，并引导您完成从下载到演示的各个步骤。如果您不熟悉 Snort，应先查看 Snort 文档。我们将涵盖以下主题： 概述 依赖项 下载 构建 Snort 运行 Snort 模糊测试 文档 尖叫 概述 本版本的 Snort++ 包含新功能，也包含 Snort 2.X 的全部功能以及 Snort 基础版本的错误修复，但下述情况除外： root@kitploit: Project = Snort++ Binary = snort Version = 3.0.0 Build...

smart-contract-vulnerabilities

智能合约漏洞 一份智能合约漏洞及其预防方法的合集。 参见 /references 获取针对 LLM 优化的参考资料。 访问控制 通过 tx.origin 进行授权 访问控制不足 对不受信任的被调用方执行 Delegatecall 签名可塑性 缺少针对签名重放攻击的保护 数学 整数溢出与下溢 差一错误 精度缺失 控制流 重入 利用区块 Gas 上限发动的拒绝服务攻击 利用（意外）revert 发动的拒绝服务攻击 在循环中使用 msg.value 交易排序依赖 Gas 不足引发的 Griefing 攻击 数据处理 未检查返回值 写入任意存储位置 无界返回数据 未初始化的存储指针 意外的...

Torward

Torward Torward is an improved version based on the torghost-gn and darktor scripts, designed to enhance anonymity on the Internet. The tool prevents data leaks and forces all traffic from our computer to be routed exclusively through the Tor network, providing a high level of privacy in our...

mojo-v

Mojo-V：面向 RISC-V 的秘密计算 Mojo-V （发音为 “mojo-five” ）是一种新的 RISC-V 扩展，为 RISC-V 引入了面向隐私的编程能力。Mojo-V 实现了秘密计算，可在不依赖脆弱软件和程序员信任的情况下，实现安全、高效且数据无关的执行。通过将敏感数据隔离在专用的秘密寄存器中，并在第三方密钥下加密内存，Mojo-V 可防止泄露，并强制执行既盲（无直接泄露）又静默（无侧信道泄漏）的计算。该设计仅通过一个模式位和四条新指令即可无缝集成到现有 RISC-V ISA...