clair

Clair Note : The main branch may be in an unstable or even broken state during development. Please use releases instead of the main branch in order to get stable binaries. Clair is an open source project for the static analysis of vulnerabilities in application containers currently including OCI...

90DaysOfCyberSecurity

Plan de Estudio de Ciberseguridad de 90 Días 📚 Tabla de Contenidos Introducción Objetivos y Audiencia Desglose Diario Día 1-7: Conceptos de Network+ Día 8-14: Conceptos de Security+ Día 15-28: Tutoriales de Linux Día 29-42: Python Día 43-56: Análisis de Tráfico Día 57-63: Git Día 64-70: ELK Día...

1earn

Todo comienzo es difícil, y luego siempre se sigue comenzando... Introducción : El propósito original de este proyecto es compartir recursos de conocimiento, permitiendo que más personas conozcan y comprendan los campos de seguridad y operaciones. Sin embargo, debido a mis limitaciones, es...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

coraza

Coraza - Web Application Firewall...

be-a-hacker

Introducción Hackear es el arte de usar las cosas de maneras no previstas. Por ejemplo, si el periodo de prueba de un software está por expirar, podrías extenderlo cambiando la fecha de tu computadora a la semana anterior. Eso es hacking. No hay una 'única forma correcta' de aprender hacking porq...

Cybersecurity-Mastery-Roadmap

🛡️ Hoja de Ruta Definitiva para Dominar la Ciberseguridad Una guía completa, paso a paso, para dominar la ciberseguridad desde nivel principiante hasta experto, con recursos seleccionados, herramientas y orientación profesional 📋 Tabla de Contenidos Introducción Cómo Usar Esta Hoja de Ruta Resumen...

Android-Security-Teryaagh

AST - Seguridad Android Teryaagh 🔥 Guías de seguridad de Android, hoja de ruta, herramientas, documentación, cursos, informes y teryaagh. 📚¡Visita el sitio web de documentación completo aquí! Generado automáticamente con MkDocs Invítame un café ☕ USDTERC20 :...

50-Days-Of-SQLi

50-Days-Of-SQLi P. ¿Por qué estoy empezando esto? Siempre he tenido dificultades como bug hunter. Cada vez que leo algo nuevo, aprendo de ello, pero apenas lo implemento. Y debido a eso, ahora cuando leo cualquier cosa, siento que ya lo sé y no puedo digerir la información completa que el writeup...

Bug-Bounty-Beginner-Roadmap

¡No dudes en contribuir a este repositorio! Roadmap de Bug Bounty para principiantes ¡Hola! Soy Ansh Bhawnani. Actualmente trabajo como ingeniero de seguridad y también soy creador de contenido a tiempo parcial. Estoy creando este repositorio para que todos contribuyan a guiar a las mentes jóvene...

hacker-roadmap

Este repositorio es una visión general de lo que necesitas aprender sobre pruebas de penetración y una colección de herramientas, recursos y referencias para practicar hacking ético. La mayoría de las herramientas son compatibles con UNIX, gratuitas y de código abierto. Estado Este proyecto ha si...

Maryam

OWASP Maryam OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. Installation Supported OS Linux FreeBSD Darwin OSX root@kitploit: $ pip insta...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

AI Security at Machine Speed: A Roadmap for Modern AppSec

With AI API calls set to grow 1,000x by 2027, you need a roadmap to secure your enterprise against agentic threats...

The Coverage Gap: Chile's Cyber Disclosure Framework Versus the USA, EU and UK

We introduce the Coverage Gap as a measurable distance between the observable public exposure of critical-infrastructure operators and their declared capability to coordinate vulnerability disclosure. We instantiate it against the 915 Chilean Operadores de Importancia Vital OIVs -- Operators of...

The Best Vulnerability Scanning Tools for 2026: A Complete Guide

Your vulnerability scanner found 14,000 issues last quarter. Your team patched 800. The other 13,200 are sitting in a spreadsheet that nobody opens anymore. This is the reality for most security teams. The scanner works. It finds vulnerabilities. But without context, prioritization, or a clear pa...

Talos Takes: 2025 insights from Talos and Splunk

In this episode of Talos Takes, Amy is joined by William Largent Cisco Talos and Lou Stella Splunk for a "double-header" discussion. With the recent release of the Cisco Talos 2025 Year in Review and the Splunk Top 50 Cybersecurity Threats report, we're breaking down the most critical trends that...

LLM Scalability Risk for Agentic-AI and Model Supply Chain Security

Large Language Models LLMs & Generative AI are transforming cybersecurity, enabling both advanced defenses and new attacks. Organizations now use LLMs for threat detection, code review, and DevSecOps automation, while adversaries leverage them to produce malwares and run targeted social-engineeri...

CVE-2026-25233

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0...

Linux Distros Unpatched Vulnerability : CVE-2026-25233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainer...