macOS_security_audit

🔒 macOS 보안 감사 macOS 시스템 강화 설정을 CIS 벤치마크 권장 사항과 비교하여 점검하고 JSON/HTML 보고서를 생성하는 Bash 기반 보안 감사 도구입니다. 제작: Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl 개요 이 도구는 두 개의 스크립트로 구성됩니다: auditMAC.sh — 전체 보안 감사를 실행하고 결과를 터미널 및 TSV 데이터 파일로 출력 generatereports.sh — TSV 데이터 파일을 JSON 보고서와 스타일이 지정된 HTML 보고...

crucible

root@kitploit: ██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝...

atlant-harden

AtlantHarden — Инструмент для усиления безопасности Windows, браузеров и Office AtlantHarden — это комплексное приложение для усиления безопасности Windows 10/11 с современным профессиональным интерфейсом. Оно применяет 606 параметров усиления защиты — включая 354 элемента управления DISA STIG дл...

imagick_secure_puppet

クラスをインクルードするだけで、imagickが存在すれば、追加のポリシーが設定されたUbuntu 14.04ベースバージョンを若干変更したものでpolicy.xmlを吹き飛ばします。 puppet applyによる実行: root@kitploit: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv imagicksecurepuppet imagicksecure $ sudo puppet apply --modulepath=. -e "include imagicksecure"...

user.js

このリポジトリと、以下のリンク先のインタラクティブなウェブページが 唯一の公式ソース です。Arkenfox を名乗る他のサイトを信頼しないでください。 🟪 user.js user.js は Firefox の設定を制御できる設定ファイルです。より技術的な詳細と説明については、wiki を参照してください。 🟩 arkenfox user.js arkenfox user.js は、可能な限り多くのプライバシーと強化されたセキュリティを提供し、追跡とフィンガープリンティングを可能な限り削減することを目指すテンプレート...

HardeningMeter

Hardening Meter Авторские права c OfriOuzan B4MB1 Хотите узнать больше о механизмах безопасности? Механизмы безопасности двоичных файлов Механизмы безопасности системы Описание HardeningMeter — это инструмент с открытым исходным кодом на Python, тщательно разработанный для всесторонней оценки...

CVE-2026-20278 Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20278

CVE-2026-20278 affects Cisco IOS XR Software and stems from improper neutralization issues (CWE-707) discovered through Cisco's internal security review. Multiple vulnerabilities are grouped under this single CVE in the September 2026 hardening release . The CVSS 3.1 score is 8.8 (HIGH) with a ne...

CVE-2026-20279

Cisco IOS XR Software is affected by improper access control weaknesses (CWE-284) identified through an internal security review and addressed in the September 2026 security hardening release . The CVSS v3.1 score is 9.8 (Critical) , with a vector indicating network attack vector , low complexity...

CVE-2026-20279 Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20275 Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20275

Cisco IOS XR Software is affected by multiple internally discovered vulnerabilities addressed in a security hardening release (September 2026). The root cause is categorized as CWE-682 (incorrect calculation issues). The combined CVSS 3.1 score is 8.8 (High) with a vector of AV:A/AC:L/PR:N/UI:N/S...

CVE-2026-20274 Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20274

Cisco IOS XR Software is affected by multiple internally discovered improper resource control issues (CWE-664), identified through Cisco's September 2026 security hardening review. The vulnerabilities carry a CVSS 3.1 score of 9.8 (Critical) with a network attack vector, low complexity, no privil...

CVE-2026-20276 Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20276

CVE-2026-20276 affects Cisco IOS XR Software and stems from insufficient control flow management (CWE-691), identified during an internal security review as part of a September 2026 hardening release. The CVSS 3.1 score is 8.6 (HIGH) with a network attack vector, no privileges required, no user i...

CVE-2026-20277 Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20277

Cisco IOS XR Software is affected by multiple internally discovered protection mechanism failure vulnerabilities (CWE-693), identified during a comprehensive internal security review. The issues carry a CVSS v3.1 score of 8.2 (HIGH) , with primarily an availability impact and a low integrity impa...

airflowscan

airflowscan Чеклист и инструменты для повышения безопасности Apache Airflow. ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Этот проект НЕ АФФИЛИРОВАН с Apache Foundation и проектом Airflow и не одобряется ими. Содержание Цель этого проекта — предоставить инструменты для повышения безопасности установок Apache Airflow...

setup-wordpress-with-security-best-practice

Настройка WordPress с соблюдением лучших практик безопасности Этот документ предназначен для веб-приложений, разработанных с использованием WordPress, которые не взаимодействуют с пользователями. В первую очередь он предназначен для корпоративных страниц брендов, различных статических страниц,...