DEBIAN-CVE-2026-65928

Bulletin has no description...

DEBIAN-CVE-2026-61476

Bulletin has no description...

DEBIAN-CVE-2026-61405

Bulletin has no description...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

NoiseHound

NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...

Sandb0x-Xtract0r

SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...

awesome-web3-security

awesome-web3-security A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below,...

Zeek-Intelligence-Feeds

Zeek インテル脅威フィード（複合インジケーター） これは、公開脅威フィードと CRITICAL PATH SECURITY が収集したデータに基づく公開フィードです。 このフィードは可能な限り頻繁に更新されます。 はじめに 以下の手順で、プロジェクトのコピーを取得して実行できます。 依存関係 ZEEK 3.0 以上 インストール Zeek の依存関係をインストールします root@kitploit: sudo apt-get install cmake make gcc g++ flex bison libpcap-dev libssl-dev python-dev swig...

rhabdomancer

rhabdomancer 「悪用可能なバグへの道は、悪用不可能なバグで舗装されている。」 -- Mark Dowd Rhabdomancer は、バイナリファイル内の潜在的に安全でない API 関数への呼び出しを特定する、超高速な IDA ヘッドレスプラグインです。監査担当者は、これらの候補ポイントからバックトレースして、信頼できない入力へのアクセスを可能にする経路を見つけることができます。 特徴 IDA 9.x と idalib-rs Rust バインディングによる、超高速なヘッドレスユーザーエクスペリエンス。 IDA が実装するあらゆるアーキテクチャ向けにコンパイルされた C/C++...

pmg

패키지 매니저 가드 PMG 악성 npm 및 pip 패키지가 설치되기 전에 차단합니다. 이미 사용 중인 패키지 매니저를 위한 심층 방어...

Harden-Windows-Security

Harden Windows Security | マルウェアに対する新たな脅威 Windowsを安全に、確実に、Microsoft公式の方法のみで堅牢化 !.NETバッジhttps://raw.githubusercontent.com/HotCakeX/.github/main/Pictures/...

ECHO-6900-BD3B-3EC6

Bulletin has no description...

ship-safe

リスクのあるコード、AIエージェントの脆弱性、サプライチェーン問題を、リリース前に検出します。 Webサイト · ドキュメント · セキュリティとデータフロー · ベンチマーク · 料金 · ブログ · コントリビュート Ship Safe CLI Ship Safeは、現代のソフトウェアチーム向けのAIセキュリティスキャナーです。リポジトリ内でローカルに実行され、アプリケーションコード、AIエージェント、MCP設定、プロンプト、依存関係、CI/CD、シークレット、クラウド関連設定にわたる問題を検出し、安全な修正のレビューと適用を支援します。 1つのコマンドでスキャンを開始:...

secure-vault-for-commercial

Secure Vault 📄 Technical paper: SecureVaultTechnicalPaperv3.5.0.pdf · Cite on Zenodo Local-first file encryption for Windows, secured by a physical USB key instead of a password. ⚠️ v3.5.0 includes a breaking security fix — see CHANGELOG.md before updating from an earlier version. Table of Content...

security-research

Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

windows_hardening

HardeningKitty and Windows Hardening Introduction The project started as a simple hardening list for Windows 10. After some time, HardeningKitty was created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win1...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...