docker-bench-security

Docker 安全基准 Docker 安全基准是一个脚本，用于检查在生产环境中部署 Docker 容器时数十种常见最佳实践。测试全部自动化，并基于 CIS Docker 基准 v1.6.0。 我们将其作为开源工具提供，以便 Docker 社区能够轻松地根据该基准对主机和 Docker 容器进行自我评估。 版本| CIS 基准版本 ---|--- 1.6.0| 1.6.0 1.5.0| 1.5.0 1.3.6| 1.4.0 1.3.5| 1.2.0 1.3.3| 1.1.0 1.3.0| 1.13.0 运行 Docker 安全基准 从你的基础主机运行 你可以直接从基础主机运行此脚本：...

Critical: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

rsdl

rsdl Subdomain Scanner v.2 Subdomain Scan With Ping Method & Check HTTP/S Statuses. Flags| Value| Description ---|---|--- --hostname| example.com| Domain for scan. --output| | Records the output with the domain name. --list| /tmp/lists/example.txt| Lister for subdomains. New Features Checking...

CVE-2022-30190

CVE 30190 Amine TITROFINE | December 17, 2022 Follina CVE-2022-30190 is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution RCE attacks. It exists when MSDT is called using the URL...

Vanguard-Map

VANGUARD1 — Multi-Domain Tactical Intelligence Map A real-time 3D map of the world's moving things: live ship traffic AIS, aircraft, satellites, submarine cables, ports, chokepoints, and space weather — rendered as a 1.5M-point terrain cloud with day/night, ocean simulation, and cinematic camera...

mubeng

An incredibly fast proxy checker & IP rotator with ease. Contributing • What's new • Documentation • Report Issues Features Why mubeng? Installation Binary Docker Source Usage Basic Options Notes Install SSL Certificate Examples Proxy checker Proxy IP rotator Burp Suite Upstream Proxy OWASP ZAP...

Subcert

Subcert Subcert is a subdomain enumeration tool, that finds all the valid subdomains from certificate transparency logs. Table of contents Setup Demo Contribute Contact Me Setup Step 1: Install Python 3 root@kitploit: apt-get install python3-pip Step 2: Clone the Repository root@kitploit: git clo...

nuguard

NuGuard Open Source NuGuard is an open source AI application security toolkit. Its goal is to provide the most extensive redteaming and behavioral validation of Agentic AI applications. With NuGuard, AI developers can focus on building their applications while NuGuard continuously tests and...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

kube-alien

Kube-alien 该工具从集群内部对 k8s 集群发起攻击。这意味着你需要已经拥有在集群中部署 Pod 的权限才能运行它。运行 kube-alien Pod 后，它会尝试通过将你的公钥添加到节点的 /root/.ssh/authorizedkeys 文件中来接管集群节点，使用的镜像为 https://github.com/nixwizard/dockercloud-authorizedkeys（可通过 config.py 中的 ADDAUTHKEYSIMAGE 参数进行调整），该镜像 fork 自 docker/dockercloud-authorizedkeys。...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux 内核提权研究 项目概述 GhostLock CVE-2026-43499 是一个影响 Linux 2.6.39 至 7.1-rc1 的内核栈 UAF 漏洞，通过 FUTEXCMPREQUEUEPI 竞态条件触发。本项目将 NebuSec/CyberMeowfia 的 x8664 exploit 适配到 OPPO Find N2 ARM64, kernel 5.10.236。 项目状态 迭代中 — 多个利用阶段已验证通过，但核心阻塞点（CFI bypass /...

ActiveDirectoryEnumeration

ADE - ActiveDirectoryEnum root@kitploit: python -m ade usage: ade -h --dc DC -o OUTFILE -u USER -s -smb -kp -bh -spn -sysvol --all --no-creds --dry-run --exploit EXPLOIT / | / / / \ / / / / / /| |/ / / / | / / / / / / / / / / / / / / / / / / / / / / \ / / // // /| |/ / / // / /...

Sn1per

Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per — The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace — whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...

WAF_buster

WAFbuster Disrupt WAF by abusing SSL/TLS Ciphers About WAFbuster This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end.Reference:https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html.It...

joomscan

====== OWASP JoomScan Project OWASP Joomla! Vulnerability Scanner JoomScan is an open source project, developed with the aim of automating the task of vulnerability detection and reliability assurance in Joomla CMS deployments. Implemented in Perl, this tool enables seamless and effortless scanni...

SocialFish

SocialFish v3.0 Modern Dynamic Phishing Toolkit SocialFish v3.0 brings powerful new features for cloning modern login pages, capturing cookies, and intercepting 2FA codes with a live operator panel. 🆕 What's New in v3.0 Playwright Browser Automation — Clone modern JS-heavy login pages Full Cookie...

distributed-system-testing

Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...

kube-knark

Kube-Knark Project Trace your kubernetes runtime !! Kube-Knark is an open-source tracer that uses pcap & ebpf technology to perform runtime tracing on a deployed Kubernetes cluster. It is tracing the Kubernetes API execution and master node configuration files permission changes. The trace matchi...

misp-objects

misp-objects Los objetos MISP se utilizan en el sistema MISP y pueden ser usados por otras herramientas de intercambio de información. Los objetos MISP son adicionales a los atributos MISP para permitir combinaciones avanzadas de atributos. La creación de estos objetos y sus atributos asociados s...

SourceWolf

SourceWolf ​ Tested environments: Windows, MAC, linux, and windows subsystem for linux WSL Sponsors Support this project by becoming a sponsor. Checkout these awesome sponsors: Oxylabs provides premium proxies with 100M+ IPs across 195 countries and ready-to-use Scraper APIs. You can use this...