710 matches found
ginger
Ginger Ginger 是一个开源安全评估工具，用于评估给定 Pentaho BA 应用实例的安全性。 请记住，该项目仍在开发中，并非所有功能都可能存在或按预期工作。 使用方法 Ginger 只有一个必填参数，即目标 Pentaho 安装的 URL： root@kitploit: user@host:$ python gynger.py http://localhost:8080/pentaho 注意：不要包含尾部斜杠 / 这样做将以匿名模式启动 Ginger，功能有限。如果已知有效凭据，则应提供这些凭据： root@kitploit: user@host:$ python...
SecAssessment-GapDetection-Thesis
D3FENDer - MITRE ATT&CK および D3FEND フレームワークを使用したセキュリティ評価およびギャップ検出ツール D3FENDer は、Michael によって修士論文「MITRE ATT&CK および D3FEND フレームワークを使用したセキュリティ評価およびギャップ検出システムの開発」のために開発されたルールベースの CLI ツールです。このツールは、組織の既存の防御対策を評価し、セキュリティギャップを特定し、さまざまな攻撃ベクトルを検出し、MITRE ATT&CK および D3FEND ナレッジベースに基づく緩和策を提案するように設計されています。...
Hash-Eye
🔍 HashEye - 高度なハッシュタイプ検出ツール HashEye は、ハッシュタイプを瞬時に検出・分析する強力なPython CLIツールです。ハッシュ形式、セキュリティレベル、エントロピー分析、パターン検出に関する詳細情報を提供します。 提供:Isaac Security Labs 🔗 リンク: GitHub: @ishaklaz Telegram: @isaacsecuritylabs ✨ 特徴 🔎 マルチフォーマット検出 : 16進数およびBase64エンコードされたハッシュをサポート 🎯 幅広いハッシュサポート :...
WinFlesher
就像 PingCastle 与 Bloodhound 一起出去喝酒，然后他们真的决定干点正事。 🍷 WinFlesher 是一款先进的攻击面安全评估框架，旨在分析、评估并报告复杂环境中的安全态势、攻击路径和修复策略。 WinFlesher 专为安全专业人员和网络安全审计人员设计，可在 Active Directory 和本地基础设施中自动进行漏洞发现和关键路径关联。 功能概览 WinFlesher 提供基于遥测的模块化风险管理方法： 自动发现： 实时检测主机配置、服务、计划任务、防火墙和 LSA 配置。 Active Directory 分析： 深入分析域、信任关系、组权限以及具有暴露...
secator v0.43.3
The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...
py-web-vuln-scanner
No d...
secator v0.42.0
The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...
MINI-WWXP-HJXC-7547
Bulletin has no description...
GO-2025-4245 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent, coredns, opentelemetry-collector, rke2-runtime, opentelemetry-collector-contrib-fips, k8sgateway-fips, eks-distro, jaeger-fips, kargo, keda-fips, splunk-otel-collector, opentelemetry-collector-fips, nats, amazon-cloudwatch-agent-fips,...
GO-2025-4010 vulnerabilities
Vulnerabilities for packages: aws-sigv4-proxy-fips, external-dns, dockerize-fips, certificate-transparency, cilium-certgen, net-kourier-fips, karpenter, tofu-controller, dagdotdev, kyverno-policy-reporter-plugins-kyverno-fips, sonobuoy-fips, hello-world-golang, nvidia-nsight-compute-13.2,...
CVE-2026-63424
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...
GHSA-P7H3-7Q52-72W8 printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)
The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...
printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)
The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...
GHSA-7CR3-H577-G38J rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)
The --preserve-root check uses a path-string test path.hasroot && path.parent.isnone rather than comparing device/inode. A symlink to / e.g. /tmp/rootlink - / has a parent component, so it passes the check. GNU caches /'s dev/inode at startup and compares every traversed directory against it...
cut: -s (only-delimited) ignored when delimiter is a newline
The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...
GHSA-WV33-5PXH-R7J7 cut: -s (only-delimited) ignored when delimiter is a newline
The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...
GHSA-2W8R-9XJ7-69J5 mktemp: empty TMPDIR creates temp files in CWD instead of /tmp
The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the...
Strapi Content API Sanitization Bypass Detection Module Scanner
This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...