cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

Cybersecurity-Mastery-Roadmap

🛡️ Roadmap Definitiva per la Padronanza della Cybersecurity Una guida completa e passo passo per padroneggiare la cybersecurity dal livello principiante a quello esperto, con risorse selezionate, strumenti e indicazioni di carriera 📋 Indice dei Contenuti Introduzione Come Usare Questa Roadmap...

zizmor

🌈 zizmor zizmor è uno strumento di analisi statica per sistemi CI/CD. Può trovare e correggere problemi di sicurezza nelle configurazioni CI/CD più comuni, inclusi GitHub Actions, Dependabot e pre-commit. Alcune delle cose che zizmor individua:...

tracee

Prima di proseguire, ti preghiamo di considerare di darci una stella su GitHub ⭐️. Grazie! Informazioni su Tracee Tracee è uno strumento di osservabilità e sicurezza runtime che ti aiuta a capire come si comportano il tuo sistema e le tue applicazioni. Utilizza la tecnologia eBPF per intercettare...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

killerbee

KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...

CVE-2026-47841 WebAuthn User Verification Bypass via Session Serialization

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

EUVD-2026-66639

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-47841

Spring Security 's WebAuthn support is vulnerable to a user verification bypass when the application uses a distributed HTTP session store . The root cause is tied to session serialization , which can allow an attacker to bypass the user verification step of a WebAuthn authenticator. Affected ver...

gixy

GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

PrivescCheck

PrivescCheck Identifica rapidamente vulnerabilità e problemi di configurazione comuni su Windows che non sono necessariamente coperti dagli standard di sicurezza pubblici, e raccogli informazioni utili per sfruttamento e post-sfruttamento. !IMPORTANT Un aspetto importante da tenere presente quand...

python-tuf

Ein Framework zur Sicherung von Software-Update-Systemen The Update Framework TUF ist ein Framework für sichere Inhaltsauslieferung und Updates. Es schützt vor verschiedenen Arten von Lieferkettenangriffen und bietet Widerstandsfähigkeit gegenüber Kompromittierung. Dieses Repository ist eine...

CVE-2026-79190

A flaw was found in Extensions in Google Chrome. A remote attacker, after compromising the renderer process, could exploit incorrect authorization to bypass the web origin policy via a crafted HTML page. This could allow the attacker to circumvent security restrictions, potentially leading to...

nodejsscan

nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

CVE-2026-54569

creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:06+00:00| published-proof-of-concept| https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j 2026-08-26 18:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywgakaxb2t 2026-08-26...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...