815 matches found
pybatfish
Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...
LLMMap
LLMMap LLMMap 是一个用于集成 LLM 的应用程序的自动化提示注入测试框架。它能发现 HTTP 请求中的注入点,利用双 LLM 架构生成针对性的攻击提示,向目标发送攻击,并通过统计可靠性测试确认发现。受 sqlmap 启发,LLMMap 将同样系统化、基于证据的方法引入到 LLM 安全测试中。 法律声明: 在未事先获得双方同意的情况下使用 LLMMap 攻击目标是违法的。最终用户有责任遵守所有适用的地方、州和联邦法律。开发者不承担任何责任,也不对因本程序引起的任何误用或损害负责。 安装 root@kitploit: python -m venv .venv && source...
restler-fuzzer
RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...
SharpWSUS
SharpWSUS SharpWSUS 是一个用于通过 WSUS 进行横向移动的 CSharp 工具。对应的博客文章(https://labs.nettitude.com/blog/introducing-sharpwsus/)提供了关于该工具、使用场景和检测的更多详细信息。 致谢 极大感谢以下资源,它们确实为我完成了 90% 的工作。该工具只是对以下内容的增强,以实现 C2 的可靠性和灵活性。 https://github.com/AlsidOfficial/WSUSpendu - 用于滥用 WSUS 的 PowerShell 工具...
ps5-umtxdbg
NOTAS El bug fue encontrado a principios de diciembre de 2020, no por mí, sino por un genio que miró 15 minutos a fbsd e inmediatamente lo detectó 🙇♂️. Esta implementación en C++ se hizo al experimentar con el aumento de la fiabilidad del exploit después de que el kernel de ps5 añadiera algunas...
ProxyListReliabilityCheck
ProxyListReliabilityCheck Script en Perl para probar la fiabilidad de una lista de proxies web abiertos. El script recibe un archivo de texto con una lista de IPAddress:Port de proxies web abiertos a probar 1 por línea. Luego intenta rastrear la siguiente URL a través de cada proxy objetivo:...
ph0neutria
ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: BPF: Detecting IP == ksym.end as part of the BPF program Now, since bpfthrow is the first call instruction with noreturn semantics within the verifier, this also leads to the elimination of dead code in unprecedented ways. For...
EUVD-2026-63718
A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...
CVE-2026-77644 Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition
A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
...
Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily...
ALSA-2026:39868 Important: nodejs:24 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...
May 12, 2026—KB5089548 (OS Build 28000.2113)
None None...
Virtuozzo Infrastructure 7.4 (7.4.0-66)
This release updates managed Kubernetes to version 1.35.3 and Fedora CoreOS to version 43, introduces API credentials for external automation workflows, and provides the updater patches and tooling required to upgrade the product to version 8.0. It also includes object storage performance...
Explainable AI-Driven Cyber Risk Analytics and Model Reliability Assessment for Intelligent Governance of U.S. Critical Infrastructure: An XGBoost and SHAP-Based Intrusion Detection Framework
The increasing penetrations of the critical infrastructure sector in the United States with intelligent digital technologies have greatly increased exposure to advanced cyber adversaries and operational vulnerabilities. AI-powered governance and automated decision-making systems are becoming a ke...
cyanide
Cyanide By @zeroxjf — an iOS...
CVE-2026-45976
Summary: CVE-2026-45976 affects the Linux kernel’s drm/amdgpu driver, where amdgpu_nbio_ras_sw_init() failing inside amdgpu_ras_init() could leak memory because the allocated con structure wasn’t freed. The fix makes the function jump to release_con to properly clean up before returning the error...