vuln-list-aqua

vuln-list-aqua Avisos de seguridad de Aqua Security...

PESTO

PESTO: PE files Statistical Tool Description PESTO is a Python script that extracts and saves in a database some PE file security characteristics or flags searching for every PE binary in a whole directory, and saving results in a database. It checks for architecture flag in the header, and for t...

Bashark

Bashark 2.0 Kit de post-explotación Bashark ayuda a pentesters e investigadores de seguridad durante la fase de post-explotación de una auditoría de seguridad. Uso Para lanzar esta herramienta en un host comprometido, simplemente ejecute source el script bashark.sh desde la terminal: $ source...

CVE-2024-7313

Explotación de vulnerabilidad del plugin Shield Security CVE-2024-7313 Resumen Este repositorio contiene un script PoC en Python diseñado para explotar una vulnerabilidad de XSS reflejado en el plugin Shield Security para WordPress, que afecta a las versiones anteriores a la 20.0.6. La...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker-Lab Este repositorio contiene un laboratorio basado en Docker para explorar y demostrar la vulnerabilidad CVE-2025-29927 de Next.js en un entorno controlado. ⚠️ DESCARGO DE RESPONSABILIDAD: Este laboratorio es solo para fines educativos y de investigación en...

CVE-2020-14364

CVE-2020-14364...

securityonion

Security Onion Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes a comprehensive suite of tools designed to work together to provide visibility into your network and host activity. ✨ Features Security Onion...

personal-security-checklist

Personal Security Checklist The ultimate list of tips to secure your digital life 🌐digital-defense.io 👉 Read the Checklist 👈 Contents The Checklist The Website The API Contributing Credits License The Checklist You can read the full checklist in CHECKLIST.md. To view/edit the raw data, see...

ParamSpider

paramspider Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing 📖 About • 🏗️ Installation • ⛏️ Usage • 🚀 Examples • 🤝 Contributing • About paramspider allows you to fetch URLs related to any domain or a list of domains from Wayback achives. It filters out "boring"...

PortSwigger-Web-Security-Academy

PortSwigger-Web-Security-Academy Los casos interesantes y m0r3 Con nu11secur1ty 😎 Informe de junio de 2022 Módulo JWT:...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

melee

MELEE: Una herramienta para detectar infecciones de ransomware en instancias MySQL Los atacantes están abusando de las instancias MySQL para llevar a cabo operaciones nefastas en Internet. Los ciberdelincuentes están apuntando a instancias MySQL expuestas y desencadenando infecciones a gran escal...

publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| Home Assistant Authenticated Arbitrary File Read vi...

grepmarx

Grepmarx - Plataforma de Seguridad de Aplicaciones Grepmarx es una aplicación web que proporciona una plataforma única para comprender, analizar e identificar rápidamente vulnerabilidades en bases de código posiblemente grandes y desconocidas. Características Capacidades SAST Pruebas de Seguridad...

pygoat

PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation From Sources Docker Container Installation Video Uninstallation Solutions For Developers...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

teampcp-supply-chain-attack

TeamPCP Supply Chain Attack: Technical Analysis & Detection Guide CVE-2026-33634 CVSS 9.4 — The most impactful CI/CD supply chain attack of 2026 so far. Between March 19–25, 2026, threat actor TeamPCP also tracked as DeadCatx3, PCPcat, ShellForce, CanisterWorm executed a cascading supply chain...

defenseclaw

root@kitploit: / \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Gobernanza de seguridad para OpenClaw y tiempos de ejecución de IA agentiva. Escanea capacidades antes de usarlas, inspecciona...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...