1437384 matches found
Blue-Team-Notes
Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...
conf-presentations
Table of Contents Quarkslab Lectures at Conferences and Seminars Quarkslab Publications in Journals or Conference Proceedings and Preprints Quarkslab Publications in Specialized Magazines Quarkslab Hardware CTFs Quarkslab Lectures at Conferences and Seminars 2026 2026-06: Pwning bluetooth devices...
awesome-connected-things-sec
🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...
sublime-rules
Sublime Rules by Sublime Security This repo contains open-source rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Examples HTML smuggling VIP / Executive impersonation Malicious OneNote files Malicious LNK files...
BAS-Guardian
BAS Guardian - Free Building Automation System BAS Security Scanner BAS Guardian is a free, open-source cybersecurity scanning tool that helps facility managers, IT teams, and OT security professionals detect internet-exposed Building Automation Systems BAS, BACnet devices, and HVAC/BMS controlle...
CICD-Goat-Vapt-Writeup
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. Why this exists Most CI/CD security writeups either stay...
VCG
==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...
VulnScan
VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...
CVE-2026-81766
The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...
bitbucket-iac-scan
Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...
CVE-2026-81766 Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin
The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...
CVE-2026-81766
The Really Simple Security WordPress plugin (aka Really Simple SSL) before 9.8.0 contains a missing permission check in the rsp_upgrade_install_plugin function, which allows a subsite administrator on a WordPress multisite network to install and execute arbitrary code from a user-supplied URL int...
EUVD-2026-68160
The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...
ElasticSearch - Remote Code Execution
ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. id: CVE-2015-1427 info: name: ElasticSearch - Remote Code Execution author: pikpikcu...
PaperCut - Unauthenticated Remote Code Execution
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...
dnsgen
DNSGen 2.0 - محرك متقدم لتوليد تبديلات أسماء النطاقات 🚀 DNSGen هي أداة قوية ومرنة لتوليد تبديلات أسماء DNS، مصممة لباحثي الأمن ومختصري الاختراق. تولّد تنويعات ذكية لأسماء النطاقات للمساعدة في اكتشاف النطاقات الفرعية وتقييمات الأمان. ✨ الميزات 🔍 محرك ذكي لتوليد تبديلات أسماء النطاقات 🚄 وضع توليد...
cfn_nag
الخلفية تبحث أداة cfn-nag عن أنماط في قوالب CloudFormation قد تشير إلى بنية تحتية غير آمنة. بشكل تقريبي، ستبحث عن: قواعد IAM متساهلة للغاية wildcards قواعد مجموعات الأمان متساهلة للغاية wildcards سجلات وصول غير مفعّلة تشفير غير مفعّل قيم حرفية لكلمات المرور لمزيد من الخلفية حول الأداة، يرجى الاطل...
MSRC-Security-Research
مقدمة يستضيف هذا المشروع أبحاثًا أمنية من مركز استجابة أمان Microsoft MSRC. المساهمة في الوقت الحالي، لا يقبل هذا المشروع مساهمات خارجية، لكننا نأمل في قبولها في المستقبل. تتطلب معظم المساهمات موافقتك على اتفاقية ترخيص المساهم CLA التي تُقرّ فيها بأن لديك الحق في منحنا حقوق استخدام مساهمتك، وتمنح...
