hexora

hexora Hexora es una herramienta de análisis estático diseñada para detectar patrones maliciosos y dañinos en código Python. Combina un motor de análisis estático basado en reglas con un modelo de aprendizaje automático que puntúa archivos fuente completos para clasificarlos como maliciosos o...

yara-x

YARA-X YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malwar...

OneRuleToRuleThemStill

OneRuleToRuleThemStill Una versión renovada y optimizada de OneRuleToRuleThemAll. OneRuleToRuleThemStill ahora tiene una reducción de 5% 6.9% en reglas de 52,000 a 49,465 48,414 con 0% de pérdida de rendimiento frente a las brechas de datos de Lifeboat y LastFM. Actualizaciones: Deduplicación de ...

quark-engine

Presentación de informes de análisis de familias de malware Inicio Rápido Paso 1. Instalar mediante PyPi Instala la última versión de Quark Engine: root@kitploit: $ pip3 install -U quark-engine Paso 2. Descargar las últimas reglas Obtén la base de datos de reglas más reciente: root@kitploit: $...

semgrep-rules

semgrep-rules Welcome! This repository contains Semgrep's Community Edition rules. In addition to the rules in this repository, the Semgrep Registry offers proprietary Pro rules that offer additional language coverage, and unlock crossfile and deep dataflow analysis. Find rules: search for...

pantagrule

Pantagrule conjuntos de reglas hashcat gigantescos generados a partir de contraseñas comprometidas Advertencia de mantenimiento del proyecto : Este proyecto se considera completado. No se realizarán solicitudes de extracción ni cambios en este proyecto en el futuro a menos que sean errores reales...

sast-rules

Reglas de Semgrep Este es el repositorio central de reglas de Semgrep que alberga las reglas de Semgrep para el analizador Semgrep de GitLab. El repositorio está estructurado de la siguiente manera: root@kitploit: . ├── mappings │ ├── findsecbugs.yml │ ├── eslint.yml │ └── ... ├── rules │ ├──...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

DonkAI

Hands-on lab for the OWASP Top 10 for LLM Applications 2025 - no real LLM required. DonkAI is deliberately vulnerable web app you can run in one command and use to learn how LLM-integrated systems get broken by actually breaking them. Every OWASP LLM Top 10 category is represented by at least one...

scirius

======= Scirius Introduction Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. .. image:: https://github.com/StamusNetworks/scirius/raw/master/doc/images/suricata-index.png :alt: Suricata page :align: cent...

scodescanner

SCodeScanner SCodeScanner significa Escáner de Código Fuente, donde el usuario puede escanear el código fuente para encontrar vulnerabilidades críticas. El objetivo principal de este escáner es encontrar vulnerabilidades dentro del código fuente antes de que el código se publique en producción...

yaraQA

yaraQA Analizador de reglas YARA para mejorar la calidad y el rendimiento de las reglas ¿Por qué? Las reglas YARA pueden ser sintácticamente correctas pero aún así disfuncionales. yaraQA intenta encontrar e informar estos problemas al autor o mantenedor de un conjunto de reglas YARA. Los problema...

2026

100 Days of YARA 2026 100 Days of YARAへようこそ！このリポジトリは、この期間中に作成されたすべてのYARAアイデアを保存する場所として機能します。作成した楽しいスクリプト、ツール、ルールはすべて、このGitHubリポジトリにコミットできます！当面、関連するブログ記事、ウォークスルー、その他の雑感は別の場所で公開しても構いません : これは一体何なのでしょうか？ 簡単に言うと、100DaysofYARA...

CVE-2021-26088

PoC for CVE-2021-26088 written in PowerShell Description An improper authentication vulnerability in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

cve-2019-6340-bits

cve-2019-6340-bits Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE modsec rule pcap example nginx config example logs example playbook...

CVE-2026-90930

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930

File Browser through version 2.63.23 is vulnerable to a path rule bypass via symbolic link resolution. The application applies access-control path rules to the requested lexical path but fails to reapply those rules after resolving symbolic links to their actual targets. This allows authenticated...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: skbuff: The SKBFLSHAREDFRAG bit was not properly propagated through the frag-transfer helpers. Two frag-transfer helpers pskbcopyfclone and skbshift fail to propagate the SKBFLSHAREDFRAG bit in skbshinfo-flags when moving...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipv6: fib6rules: avoided possible NULL dereferencing in fib6ruleaction. syzbot is capable of triggering the following crashes 1, caused by the unsafe use of ip6dstidev. Indeed, ip6dstidev can return NULL, and this value must...