devsecops-poc-workflows

Laboratorio público DevSecOps Código sintético y educativ...

watcher

反反向Shell 大家好，我是themoon（也叫shalev），我创建这个项目是为了帮助那些运行安全性较低服务器的人。 你可以使用这个项目来保护你的计算机免受攻击者可能试图对你的计算机进行反向Shell的攻击。 关于此项目的信息 你可以在这里查看此项目的工作方式 https://miro.com/app/board/uXjVGAn3Ml8=/?sharelinkid=431140843238 反向Shell 检测可疑进程和命令执行 扫描进程内存以检测Shellcode注入模型 记录所有发现的操作 操作系统支持 Windows用户 Linux 要求 1...

SpoofcheckSelfTest

Autocomprobación de SpoofCheck Aplicación web que te permite comprobar si tu dominio es vulnerable a la suplantación de correo electrónico. NOTA: Esta aplicación aún está en desarrollo. Instalación: Esta aplicación está diseñada para usarse como servicio. Sin embargo, si quieres alojarla tú mismo...

faction v1.8.13

OWASP - FACTION PenTesting Report Generation and Collaboration Framework Faction is now an OWASP Project! You can find more informationhere Sponsors Premium Sponsors otto-js - PCI and Client Side Security | Secninjaz Technologies LLP ---|--- Become a Sponsor ❤️ If you like the project and would...

FencePost

FencePost 多主机 UFW 防火墙仪表板。通过 SSH 连接 Linux 主机，解析防火墙规则和监听端口，以通俗易懂的语言进行解释，并标记安全缺口。 功能特性 多主机概览 —— 一目了然查看所有主机的 UFW 状态、默认策略和活跃服务 通俗易懂的解释 —— 每条防火墙规则都被翻译成可读的描述，包含 VLAN 和服务名称 安全缺口检测 —— 发现没有匹配 UFW 允许规则的监听端口，按外部暴露和本地暴露分类 连接诊断 —— 追踪源 IP + 目标端口经过规则链的过程，查看流量会被允许、阻止还是拒绝 变更检测 —— 将当前状态与上次快照进行比较，并将事件（规则添加/删除、UFW...

CVE-2024-53677

This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup root@kitploit: cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit...

git_rce

CVE-2024-32002 PoC 1. Debes configurar la opción de enlace simbólico de git de la siguiente manera: root@kitploit: git config --global core.symlinks true 2. Luego explota CVE-2024-32002 con el siguiente comando: root@kitploit: git clone --recursive https://github.com/EQSTSeminar/gitrce.git...

Cowrie and Grafana Honeypot using Terraform on DigitalOcean

使用 Terraform 在 DigitalOcean 上部署 Cowrie 和 Grafana 蜜罐 演示视频 目录 目录 系统概述 技术栈 项目目录结构 硬件要求 安装与配置 Terraform 状态管理 CI/CD 流水线 系统架构 观察记录 使用方法 项目文档 架构设计与权衡 系统运行流程 遇到的问题与限制 未来改进 安全考量 贡献者 许可证 系统概述 一个使用 Terraform 部署在 DigitalOcean 云服务器上的 SSH/Telnet 蜜罐堆栈。攻击行为由 Cowrie 捕获，存储在 Loki 中，并在 Grafana 中通过攻击来源的实时世界地图进行可视化。 技...

PacketPirate

PacketPirate Un proxy MITM sin interfaz gráfica, programable y basado en la línea de comandos, diseñado para la interceptación, análisis y modificación de tráfico de red en sistemas Windows. Funciona de manera similar a los proxies GUI estándar de la industria, pero está optimizado para entornos ...

eos

Enemigos de Symfony EOS EOS saquea información de un objetivo Symfony en modo depuración: Sección| Descripción ---|--- General| Obtener información general sobre el objetivo. Phpinfo| Extraer las variables de entorno de Symfony del phpinfo expuesto. Routes| Obtener la lista de rutas registradas...

OpenEMR_Vulnerabilities

OpenEMR Remote Code Execution Vulnerability OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes. PoC root@kitploit: git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr...

strelka v1.0.2

Releases | Documentation | Pull Requests | Issues !Pull...

DEBIAN-CVE-2026-53587

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

CVE-2026-53587

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

DEBIAN-CVE-2026-53584

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...

DEBIAN-CVE-2026-53583

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

DEBIAN-CVE-2026-53585

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...

CVE-2026-53583

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

CVE-2026-53586

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, the built-in HTTP transport in src/libgit2/transports/http.c follows an offsite initial redirect, an...

CVE-2026-53584

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...