securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

Dr0p1t-Framework

Actualmente no mantenido Espera la próxima versión Dr0p1t-Framework ¿Alguna vez has oído hablar de los troyanos droppers? En resumen, un dropper es un tipo de malware que descarga otros malware y Dr0p1t te da la oportunidad de crear un dropper sigiloso que evade la mayoría de los AV y tiene un...

volatility

Este proyecto está archivado. Consulte Volatility 3 para investigaciones modernas: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Marco de utilidad de extracción de memoria volátil El Volatili...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

Invoke-ATTACKAPI

Invoke-ATTACKAPI OBSOLETO RECOMENDAMOS USAR: https://github.com/Cyb3rWard0g/ATTACK-Python-Client Un script de PowerShell para interactuar con el framework MITRE ATT&CK a través de su propia API con el fin de recopilar información sobre técnicas, tácticas, grupos, software y referencias...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

FullPowers

FullPowers FullPowers es una herramienta de Prueba de Concepto que creé para recuperar automáticamente el conjunto de privilegios predeterminado de una cuenta de servicio, incluyendo SeAssignPrimaryToken y SeImpersonate. Justificación En Windows, algunos servicios ejecutados como LOCAL SERVICE o...

CESS

CESS — Secreto de Shamir Encantado Criptológicamente ¿Esto es basura o chapuza de IA? Un criptógrafo o implementador serio que revise CESS normalmente abrirá vectors/ y testdata/ antes de leer prosa. El conjunto de pruebas es la prueba de trabajo: codifica conocimiento de dominio que no puede...

ShimMe

ShimMe Tools from the DEFCON 32 talk "SHIM me what you got - Manipulating Shim and Office for Code Injection" Office Injector - Invokes an RPC method in OfficeClickToRun service that will inject a DLL into a suspended process running as NT AUTHORITY\SYSTEM launched by the task scheduler service,...

gradle-static-analysis-plugin

OBSOLETO Complemento de análisis estático de Gradle ⚠️ Se mantiene un fork de este proyecto en https://github.com/GradleUp/static-analysis-plugin/ Migre usando el id de complemento com.gradleup.static-analysis. Un complemento de Gradle para aplicar fácilmente la misma configuración de herramientas...

PANIX

PANIX - Persistence Against NIX PANIX is a powerful, modular, and highly customizable Linux persistence framework designed for security researchers, detection engineers, penetration testers, CTF enthusiasts, and more. Built with versatility in mind, PANIX emphasizes functionality, making it an...

PT-2026-90316

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify pre content builds its file range on the triggering task's stack. fanotify alloc perm event saves a pointer to range.pos in the heap-allocated permission event so copy rang...

PT-2026-90140

In the Linux kernel, the following vulnerability has been resolved: io uring/waitid: honor task work cancellation io waitid cb may run through the fallback task work path when task work add can no longer queue work to the originating task. The fallback runs from a kworker and io uring marks such...

PT-2026-90111

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smc llc srv add link smc llc srv add link keeps add llc pointing into the queue entry: add llc = &qentry-msg.add link; smc llc.c:1482 ... smc llc save add link infolink new, add ll...

PT-2026-90058

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack file send sigiotask When inspecting the credentials of another task, objective credentials -real cred, accessed with task cred must always be used. Accessing -cred on a non-current task is forbidden...

PT-2026-90470

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk-action escaping walk pmd range If -pmd entry sets walk-action = ACTION AGAIN, the pmd none check is retried. The PMD entry may be cleared at the point of retry. In this case, if walk-ops-install pte is...

PT-2026-90479

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering trusted tpm exit drops the TPM chip reference and frees the digest array before unregistering the trusted key type. key type lookup holds key types sem for reading until the key operation...

PT-2026-90144

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk store and kek store sk store and kek store strip a trailing newline from the sysfs write before allocating the key buffer: length = count; if buflength - 1 == ' ' length--; bioscf...