security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must act responsibly. This i...

lynis

Documentación ¿Te gusta este software? Marca la estrella del proyecto y conviértete en un stargazer. lynis Lynis - Herramienta de auditoría de seguridad y hardening para sistemas basados en UNIX. Lynis es una herramienta de auditoría de seguridad para sistemas basados en UNIX como Linux, macOS, B...

stackrox

Tabla de Contenidos Plataforma de Seguridad Kubernetes de StackRox Tabla de Contenidos Comunidad Despliegue de StackRox Instalación Rápida usando Helm Instalación Manual usando Helm Instalación usando el Operador Instalación mediante Scripts Distribuciones de Kubernetes EKS, AKS, GKE OpenShift...

wazuh

Wazuh Wazuh es una plataforma gratuita y de código abierto utilizada para la prevención, detección y respuesta ante amenazas. Es capaz de proteger cargas de trabajo en entornos locales, virtualizados, en contenedores y en la nube. La solución Wazuh consta de un agente de seguridad de endpoint,...

keeweb

Password Manager KeeWeb Password Manager🔑 KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in. !Versiongithub-version-imggithub-version-uri...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

frameworks_base_CVE-2023-20943

This repository does not have a README...

Awesome-GPT-Agents

😎 Awesome GPTs Agents for Cybersecurity The "Awesome GPTs Agents Repo" represents an initial effort to compile a comprehensive list of GPT agents focused on cybersecurity offensive and defensive, created by the community. Please note, this repository is a community-driven project and may not list...

CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

HAProxy_CVE-2021-40346

HAProxyCVE-2021-40346 HAProxy CVE-2021-40346 Writeup Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CANToolz

CANToolz alias YACHT Otra Herramienta de Hacking de Automóviles CANToolz es un framework para analizar redes y dispositivos CAN. Proporciona múltiples módulos que pueden encadenarse usando el sistema pipe de CANToolz y ser utilizados por investigadores de seguridad, probadores de seguridad...

MAAD-AF

MAAD Attack Framework MAAD-AF es una herramienta de ataque en la nube de código abierto para entornos de Microsoft 365 y Entra ID Azure AD. MAAD-AF ofrece pruebas de seguridad simples, rápidas y efectivas. Valide los controles en la nube de Microsoft y pruebe las capacidades de detección y...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

trivy-action

Trivy Action GitHub Action for Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy wit...

cip-security-poc

cip-security-poc — proving the fix principle behind CVE-2021-22681 not just its flaw Six runnable scripts — real EtherNet/IP protocol traffic Test 1, real TLS/PKI mechanics Tests 3–6 — zero Rockwell software or licensing anywhere in the chain. Built to test a claim before writing it up, not to...

BurpAPISecuritySuite

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpAPISecuritySuite Professional-grade Burp Suite extension for comprehensive API...

CVE-2017-11882

This repository does not have a README...

contrast

CodeSec by Contrast Security CodeSec delivers: The fastest and most accurate SAST scanner. Immediate and actionable results — scan code and serverless environments. A frictionless and seamless sign-in process with GitHub or Google Account. From start to finish in minutes. By running a scan on you...

CyberMeowfia

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ IonStack followup, follow https://github.com/NebuSec/CyberMeowfia/issues/44 Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : ...

Trust-Decision-Security

Trust Decision Solver - Ingeniería Inversa Este software te permite Generar huellas digitales dinámicas infinitas Generar tokens de pase TD infinitos sin detección Algunas de las fallas de seguridad web incluyen: No hay comprobaciones de huellas digitales TLS en el dominio del token Sin embargo,...