bluemonday

bluemonday bluemonday es un sanitizador HTML implementado en Go. Es rápido y altamente configurable. bluemonday toma contenido generado por usuarios no confiable como entrada, y devolverá HTML saneado contra una lista blanca de elementos y atributos HTML aprobados para que puedas incluir el...

mojo-v

Mojo-V: Computación Secreta para RISC-V Mojo-V pronunciado “mojo-five” es una nueva extensión de RISC-V que introduce capacidades de programación orientadas a la privacidad para RISC-V. Mojo-V implementa computación secreta, lo que permite una ejecución segura, eficiente y oblivious a los datos s...

smart-contract-vulnerabilities

Vulnerabilidades de Contratos Inteligentes Una colección de vulnerabilidades de contratos inteligentes junto con métodos de prevención. Consulta /references para referencias optimizadas para LLM. Control de Acceso Autorización mediante tx.origin Control de Acceso Insuficiente Delegatecall a...

SharpHose

Overview SharpHose is a C password spraying tool designed to be fast, safe, and usable over Cobalt Strike's execute-assembly. It provides a flexible way to interact with Active Directory using domain-joined and non-joined contexts, while also being able to target specific domains and domain...

talisman

Talisman 检测并防止机密被提交进入版本控制的工具 目录 什么是Talisman？ 安装 安装到路径（推荐方法） 作为全局钩子模板安装 配置项目 与钩子框架一起使用 Pre-commit Husky 直接调用Talisman 升级 Talisman实战 验证 忽略文件 交互模式 忽略特定检测器 忽略特定关键词 忽略同一类型的多个文件（使用通配符） 通过指定语言范围忽略文件 自定义搜索模式 配置严重性阈值 作为CLI工具使用Talisman 交互模式 Git历史扫描器 校验和计算器 Talisman HTML报告 示例截图 卸载 从全局钩子模板卸载 从单个仓库卸载...

EDR-Preloader

EDR-Preloader An EDR bypass that prevent EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer For details, see: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html...

CVE-2017-11882-Preventer

CVE-2017-11882-Preventer Chrome Extension CVE-2017-11882 Preventer for .docx files...

CVE-2023-0400

Trellix 数据丢失防护 DLP 绕过 https://kcm.trellix.com/corporate/index?page=content&id=SB10394...

tarian

Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...

EUVD-2026-83602

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials does not correctly check for fine-grained reset-password permissions. This allows a delegated administrator, who should be restricted from...

isslfix

iOS : iSSLFix: Certificate 1BDC0A9E...

anteater

Anteater - Marco de Verificación de Puerta CI/CD Descripción Anteater es un marco abierto para evitar la fusión no deseada de cadenas nominadas, nombres de archivo, binarios, funciones obsoletas, código/credenciales de entorno de staging, etc. Cualquier cosa que pueda especificarse con sintaxis d...

VUL4J-60

antisamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc., that get...

torghost

What is TorGhost ? TorGhost is an anonymization script. TorGhost redirects all internet traffic through SOCKS5 tor proxy. DNS requests are also redirected via tor, thus preventing DNSLeak. The scripts also disables unsafe packets exiting the system. Some packets like ping request can compromise...

metabadger

Metabadger 通过在 AWS EC2 上自动升级到更安全的实例元数据服务 v2 IMDSv2 来防止 SSRF 攻击。 Metabadger 目的和功能 诊断并评估您当前对 AWS 实例元数据服务的使用情况，并了解该服务的工作原理 为您升级到实例元数据服务 v2 做好准备，以防范 v1 攻击向量 赋予您将实例专门更新为仅使用 IMDSv2 的能力 赋予您在不需要实例元数据服务的地方禁用它，从而减少攻击面的能力 什么是 AWS 实例元数据服务？ AWS 元数据服务本质上让您可以访问实例内部的所有内容，包括实例角色凭证和会话令牌 已知的 SSRF 漏洞，利用此攻击作为进入您环境的跳板...

MicroC-u-os2-vuln-code-extracted-from-

MicroC-u-os2-vuln-code-extracted-from- Ataque de desbordamiento de búfer y prevención para un sistema de soft-procesador basado en FPGA - 7.ª Conferencia Internacional sobre Innovación en Ingeniería Electrónica y de Comunicaciones ICIECE'18...

network-security-snort

Snort IDS/IPS Deployment Lab A full-cycle deployment of Snort 3 as both an Intrusion Detection System passive monitoring and an Intrusion Prevention System active blocking via iptables, validated against four attack vectors across a three-machine virtual network on Kali Linux. The lab proves the...

lsm_bpf_check_argc0

Check ARGC0 LSM BPF Simple LSM BPF program to prevent program executions with argc == 0, e.g. pwnkit CVE-2021-4034. It does nothing more than a simple check that all exec system calls are called with argc = 1. The check is based on Ariadne Conill's patch. How to build root@kitploit: On Ubuntu $...

infisical

The open-source secret management platform : Sync secrets/configs across your team/infrastructure and prevent secret leaks. Community | Infisical Cloud | Self-Hosting | Docs | Website | X | Hiring Remote/SF Introduction Infisical is the open source security infrastructure platform that teams use...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, the patch 2039f26f3aca “bpf: Fixed leakage due to insufficient speculative store bypass mitigation” includes instructions...