EventHorizon

EventHorizon EventHorizon is a tool meant to arm security analysts and/or researchers with Event Tracing for Windows ETW telemetry that, coupled with sigma-like rules, allow for robust endpoint detection and response capabilities. That being said, EventHorizon is in no way a replacement for prope...

chaos-operator

chaos-operator de Litmus pour injecter des expériences de chaos sur Kubernetes Codacy Badge Le chaos operator de Litmus est utilisé par les développeurs d'applications Kubernetes et les SRE pour injecter du chaos dans les applications et l'infrastructure Kubernetes de manière contrôlée. Son...

Project-Eyes-On

Project Eyes On v3.0 Global Surveillance Coded by: Y0oshi IG: @rde0 "The unified intelligence tool for mass IP camera scanning." Overview Project Eyes On is a hyper-fast, multi-threaded surveillance tool designed to locate open IP cameras across the globe. It combines two powerful engines: 1...

tomcat-cve-2025-24813-lab

Apache Tomcat CVE-2025-24813 Local Reproduction Record For local authorized experiments, patch understanding, and defensive validation only. Do not send requests to unauthorized targets. This project records the reproduction process of CVE-2025-24813 on a local Apache Tomcat 9.0.98 instance: usin...

vulscan

vulscan - Vulnerability Scanning with Nmap Introduction Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline...

rootkit-detection-ebpf-time-trace

Rootkit Detection with eBPF Time Tracing This repository contains code to collect time measurements of kernel functions that are manipulated by rootkits when they hide files, as well as a semi-supervised detection method that analyzes shifts of kernel function execution times. This implementation...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities. Aspect| Information ---|--- Tool name| IaC Scan Runner Docker image| xscanner/runner PyPI package| iac-scan-runner Documentation| docs Contact us| [email protected] Table of Contents Description Runnin...

iac-scan-runner

IaC Scan Runner خدمة تقوم بفحص البنية التحتية كرمز Infrastructure as Code لديك بحثًا عن الثغرات الشائعة. الجانب| المعلومات ---|--- اسم الأداة| IaC Scan Runner صورة Docker| xscanner/runner حزمة PyPI| iac-scan-runner التوثيق| docs اتصل بنا| [email protected] Table of Contents الوصف التشغيل...

RingReaper

RingReaper RingReaper est un agent de post-exploitation simple pour Linux, conçu pour ceux qui doivent opérer en toute discrétion, en minimisant les risques de détection par les solutions EDR. L'idée derrière ce projet était d'exploiter iouring , la nouvelle interface d'E/S asynchrone du noyau...

CVE-2026-97630

The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all versions up to, and including, 7.5.54.7212 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-103889

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter. This is due to missing authentication and nonce checks on the wploaded handler combined with no sanitization...

CVE-2026-104021

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettingscachecookieexclude parameter. This is due to the plugin registering the cachecookieexclude setting via registersetting without a sanitizecallback, whi...

oletools

python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files also called Structured Storage, Compound File Binary Format or Compound Document File Format, such as Microsoft Office 97-2003 documents, MSI files or Outlook messages, mainly for malware analysis, forensics and...

SkillsGuard

Support Development If SkillsGuard protects your pipeline, consider supporting ongoing research and new detection rules. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. Static security scanner for AI agent skill packages. Detects...

ore-mal-pkg-inspector

OreWatch كشف الحزم الضارة عبر أنظمة متعددة وماسح أمان سلسلة التوريد أداة أمان من المستوى الإنتاجي لاكتشاف الحزم الضارة وتهديدات سلسلة التوريد عبر أنظمة npm وPyPI وMaven وRubyGems وGo وCargo. تستفيد من جمع استخبارات التهديدات الآلي من مصادر أمنية موثوقة لتحديد التبعيات المخترقة في مشاريعك. OreWatc...

ore-mal-pkg-inspector

OreWatch Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner A production-grade security tool for detecting malicious packages and supply chain threats across npm, PyPI, Maven, RubyGems, Go, and Cargo ecosystems. Leverages automated threat intelligence collection from...

terminalphone

TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...

metasploit-bailiwicked_domain-fix

🚀 metasploit-bailiwickeddomain-fix إصلاح لخطأundefined method each في ملف bailiwickeddomain.rb الخاص بـ Metasploit وحدة تسميم ذاكرة التخزين المؤقت لنظام DNS - CVE-2008-1447 🔎 المشكلة أثناء اختبار CVE-2008-1447 باستخدام Metasploit، تعطلت الوحدة الأصلية مع: undefined method each for an instance of...

forensictools

forensictools is a toolkit designed for digital forensics, offering a wide array of tools. Its primary goal is to simplify the creation of a virtual environment for conducting forensic examinations. In addition to installing the tools, forensictools seamlessly integrates the programs into the...