zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

kprotect

🛡️ kprotect Resumen kprotect es un motor de seguridad a nivel de kernel diseñado para proteger tus datos sensibles de ataques a la cadena de suministro como bibliotecas maliciosas de Python o Node.js. Actúa como una capa de seguridad independiente para los archivos más sensibles. Cumplimiento...

ifuncd-up

In Response to Hacker News I see you jokers on the orange website are giving me a hard time. I will make a few choice responses below, but first I offer a challenge: I will send $500 of my own money to the first person who can demonstrate this attack without ifunc. I am genuinely interested, and...

ggshield

ggshield: protege tu código con GitGuardian...

FARO

FARO Document Sensitivity Detector Table of contents What is this What's in here? Run FARO with Docker Run FARO on host machine Prerequisites Virtual environment Dependencies NER models FARO Spider Single File Detection Technical Details FARO entity detector Configuration Supported Input File...

Squre

SQURE S ecure Q uality U ncrackable R untime E ncryption - Advanced Binary Protection Toolkit for Windows PE files. Features SQURE provides multi-layered protection against reverse engineering, debugging, and tampering:...

fwknop

fwknop - Autorización de Paquete Único Introducción fwknop implementa un esquema de autorización conocido como Autorización de Paquete Único SPA, por sus siglas en inglés para un fuerte ocultamiento de servicios. SPA requiere solo un único paquete que está cifrado, no reproducible y autenticado...

airgap

airgap Security for the modern AI age. No security layer is perfect. airgap is still experimental. Contributions welcome! Protected secrets airgap launches a target program e.g. an AI coding agent inside its own mount namespace and transparently replaces secrets with redacted versions. A program...

ProtectMyTooling

No Detectes Herramientas - Detecta Técnicas La razón detrás de publicar este software se describió en una publicación de blog adjunta: ProtectMyTooling - No detectes herramientas, detecta técnicas Introducción Script que envuelve una multitud de empaquetadores, protectores, ofuscadores, cargadore...

Harden-Windows-Security

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs !IMPORTANT Here are Quick Access Points to Important Sections of this Repository Hard...

CVE-2020-5421

Reproduction of Spring Security Vulnerability CVE-2020-5421 Vulnerability Overview CVE-2020-5421 bypasses the protection against RFD attacks via the jsessionid path parameter. The earlier RFD protection was added in response to CVE-2015-5211. What is RFD Reflective File Download RFD is an attack...

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

1. Native API & APC Injection The x64dbg memory dump reveals that Agent Tesla uses Native API NT API calls for low-level operations, including APC Asynchronous Procedure Call injection. Key Functions Observed: NtQueueApcThread – Injects code into a target thread via APC. NtReadVirtualMemory –...

EUVD-2026-79236

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of parallel or retried requests, the stored...

PoW-Shield

Descripción PoW Shield proporciona protección DDoS en la capa de aplicación OSI actuando como un proxy que utiliza prueba de trabajo proof of work entre el servicio backend y el usuario final. Este proyecto busca ofrecer una alternativa a los métodos generales anti-DDoS como el ReCaptcha de Googl...

PPLcontrol

PPLcontrol Descripción Esta herramienta le permite listar procesos protegidos, obtener el nivel de protección de un proceso específico o establecer un nivel de protección arbitrario. Para más información, puede leer esta entrada de blog: Depurando Procesos Protegidos. Uso 1. Descargar el...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

NORM-EDR

NORM-EDR NORM Normal EDR is an experimental kernel-mode EDR research project focused on explainable detection rather than silent blocking. Instead of assigning scores or killing processes, NORM answers one question: Why does this binary look suspicious? This project is built step-by-step in publi...

GhostInTheNet

GhostInTheNet Ultimate Network Stealther que convierte a Linux en un Fantasma en la Red y protege contra MITM/DOS/escaneo Propiedades: Invisibilidad en la red Anonimato en la red Protege contra MITM/DOS Transparente Multiplataforma Minimalista Dependencias: Linux 2.4.26+ - funcionará en cualquier...

Invoke-DumpMDEConfig

DumpMDEConfig PowerShell Script Overview Invoke-DumpMDEConfig is a PowerShell script designed to extract and display Microsoft Defender configuration and logs, including excluded paths, enabled ASR rules, allowed threats, protection history, and Exploit Guard protection history. The script provid...