kubestriker

A Blazing fast Security Auditing tool for kubernetes!!...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

logdata-anomaly-miner

logdata-anomaly-miner Esta herramienta analiza datos de registro logs y permite definir pipelines de análisis para la detección de anomalías. Fue diseñada para ejecutar el análisis con recursos limitados y los permisos más bajos posibles, lo que la hace adecuada para su uso en servidores de...

google-ctf

Google CTF This repository lists most of the challenges used in the Google CTF since 2017, as well as most of the infrastructure that can be used to run them. IMPORTANT - The code in the 201x and 202x folders have unfixed security vulnerabilities. These are there on purpose, and running these on...

fzy

fzy fozzylang General-purpose systems language and production toolchain with a memory-safe-by-default shipped safe-language surface, verifiable correctness, deterministic execution, and replay-first debugging built in. fzy ships one production CLI, fz, for both compiler workflows and deterministi...

spire

!Production...

scodescanner

SCodeScanner SCodeScanner significa Escáner de Código Fuente, donde el usuario puede escanear el código fuente para encontrar vulnerabilidades críticas. El objetivo principal de este escáner es encontrar vulnerabilidades dentro del código fuente antes de que el código se publique en producción...

stagefright-cve-2015-3864

stagefright-cve-2015-3864 PoC - Parches binarios para CVE-2015-3864 NO para producción, úselo bajo su propio riesgo...

python-ecdsa

순수 Python ECDSA 및 ECDH 이것은 ECDSA타원곡선 디지털 서명 알고리즘, EdDSAEdwards-curve 디지털 서명 알고리즘 및 ECDH타원곡선 Diffie-Hellman를 지원하는 ECC타원곡선 암호의 사용하기 쉬운 구현체로, 순수 Python으로 구현되었으며 MIT 라이선스로 배포됩니다. 이 라이브러리를 사용하면 키 쌍서명 키와 검증 키을 빠르게 생성하고, 메시지에 서명하고, 서명을 검증할 수 있습니다. 또한 교환된 공개 키를 기반으로 공유 비밀 키에 합의할 수도 있습니다. 키와 서명은 매우 짧아서 처리...

zap-api-rust

ZAP Rust API The Rust implementation to access the ZAP API. For more information about ZAP consult the main ZAP project. This project is at a very early stage and should not be used in production! Getting Help For help using ZAP API refer to: Examples - collection of examples using the library;...

aiiroverlay

Why an overlay, not a replacement. The thesis. Part of the AI IR Overlay™ framework. SeeCONTENTMAP.md for the full repository map. The AI IR Overlay: Framework Overview Current release: v0.35.0 · 2026-07-09 · CHANGELOG A practical incident-response baseline for AI agents in production. Adapt and...

tls

ztls A TLS 1.3 implementation for QUIC written in Zig, strictly adhering to RFC 8446 TLS 1.3 and RFC 9001 QUIC-TLS. Status Aspect| Info ---|--- API Stability| Production Zig Version| 0.16.0 Platforms| Linux, macOS, Windows Performance note The 2 ms handshake target is validated on Ed25519 and...

SNet

SNet 日本語版はこちら / Japanese version Un CTF donde usas IA para capturar la bandera. ¿Sin experiencia en pentesting? No hay problema. Claude Code actúa como tu entrenador personal: configura el entorno, te enseña las herramientas y te guía a través de técnicas de ataque reales paso a paso. Tú escribes...

CVE-2026-33936

CVE-2026-33936 Vulnerabilidad de denegación de servicio en ecdsa PyPI Introducción Identifiqué y divulgué de forma responsable una vulnerabilidad de severidad Moderada en python-ecdsa , una biblioteca de criptografía de Python ampliamente utilizada con 47,8 millones de descargas en el último mes...

-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.

-vercel-prod.yml-aplicación-es-vulnerable-a-CVE-2025-66478. recompensa por errores...

Nest

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — defensive scanner Organizations running NGINX Open Source , NGINX Plus , or NGINX-based ingress/controllers should verify whether they are affected by CVE-2026-42945 and patch or reconfigure before exploitation attempts hit production edges. This repository provides a...

CVE-2026-32662

CVE-2026-32662: Código de depuración activo en producción Aviso Campo| Valor ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Actualización A CVSS 3.1| 5.3 Medio Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-489 Código de depuración activo Investigador| Michael Groberman — Gr0m...

Vulnerabilities present in Siemens products

Siemens has identified vulnerabilities in various products such as Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS, and Siveillance. These vulnerabilities allow malicious actors to carry out attacks that can cause the following types of damage: Denial-of-Service DoS attacks Data manipulation Evasio...

openclaw_vulnerabilities_and_solutions

OpenClaw — vulnerabilities, hardening, and VPS deployment Санитизированная публичная документация по безопасному развёртыванию OpenClaw на VPS: архитектура доступа, известные уязвимости и практические инциденты с решениями. Public, sanitized documentation from real OpenClaw operations: how to...