nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

KNX-Bus-Dump

KNX Bus Dump KNX è un popolare protocollo di automazione degli edifici e viene utilizzato per interconnettere sensori, attuatori e altri componenti di un edificio intelligente. Il nostro strumento KNX Bus Dump utilizza la libreria Java Calimero, alla quale abbiamo contribuito per questo strumento...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

ChameleonMini

ChameleonMini Este NÃO é o repositório oficial do ChameleonMini, uma ferramenta portátil livremente programável para análise de segurança NFC que pode emular e clonar cartões contactless, ler tags RFID e capturar/registrar dados de RF. Este repositório traz suporte para o Chameleon Tiny. Nosso...

http-desync-guardian

Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 – 1991 HTTP/1.0 – 1996 HTTP/1.1 RFC 2068 – 1997 RFC 2616 - 1999 - 2014...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

revera

Revera Der Kredit-Score für npm-Pakete. Revera hilft dir zu entscheiden, ob ein Paket eine Installation wert ist, bevor du npm install ausführst. Es analysiert Paketqualität, Wartung, Sicherheit, Ökosystem-Gesundheit und Publisher-Vertrauen – und propagiert das Risiko jetzt transitiv über deinen...

TEE-reversing

Nozioni di base e generali sui TEE Introduzione al Trusted Execution Environment: la TrustZone di ARM https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html Introduzione ai TEE titolo originale: TEEを中心とするCPUセキュリティ機能の動向...

Sandb0x-Xtract0r

SandB0x-Xtract0r Un motore automatizzato di analisi della sicurezza, multipiattaforma, per detonare in sicurezza file, binari e applicazioni sospetti. 🎬 Guarda la Demo del Progetto 💻 Stack Tecnologico Linguaggi di Programmazione Principali, Sistemi Core...

RFC-Security-Research

RFC-Security-Research Articolo originale e script di supporto per analizzare gli aspetti di sicurezza degli RFC Internet. Panoramica Questo repository contiene una revisione della sicurezza degli RFC scritta nello stile di un RFC, oltre a vari script Python di supporto utilizzati per ottenere i...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

Runtime Skill Audit: Targeted Runtime Probing for Agent Skill Security

Agent skills let LLM agents reuse instructions, resources, tools, and workflows, but they also create a new place for malicious behavior to hide. A skill may look benign in its documentation or code while becoming harmful only when it is invoked with particular user requests, local assets,...

Ternary Public-Key Cryptosystem

Public-key cryptosystems eliminate the requirement for pre-shared secret keys by enabling encryption with a publicly disclosed key and decryption with a corresponding private key. In this article we generalize the public-key cryptosystems to ternary algebraic structures, with particular attention...

Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem

We analyzed 3,984 AI agent skills from major marketplaces and found 76 confirmed malicious payloads, including credential theft, backdoor installation, and data exfiltration. 13.4% of all skills contain at least one critical-level security issue and at least 8 manually confirmed malicious skills...

Toward Securing AI Agents like Operating Systems

Autonomous agents based on large language models LLMs are rapidly emerging as a general-purpose technology, with recent systems such as OpenClaw extending their capabilities through broad tool use, third-party skills, and deeper integration into user environments. At the same time, these agentic...

security-skills

Security Skills Security Skills is a Hermes Agent skill pack...

PT-2026-39742

CVE-2026-20352 iOS 26.3-Research A Public Open-Source research framework with .py and .sh files created for analyzing iOS 26.3 security mechanisms. This project is designed to be advanced through the collective in... https://t.co/5O6AR6f6H7...

Adding Compilation Metadata to Binaries to Make Disassembly Decidable

The binary executable format is the standard method for distributing and executing software. Yet, it is also as opaque a representation of software as can be. If the binary format were augmented with metadata that provides security-relevant information, such as which data is intended by the...