CyberMeowfia

الموقع: nebusec.ai · تويتر @nebusecurity · قائمة الثغرات 885+ متابعة IonStack، تابع https://github.com/NebuSec/CyberMeowfia/issues/44 أحدث الأبحاث IonStack الجزء الثاني : GhostLock، ثغرة stack-UAF موجودة في جميع توزيعات لينكس منذ 15 عامًا Linux Kernel 📖 الكتابة · 🐦 تويتر Longinus : حدّان في ثغرة...

SweetSecurity

SweetSecurity Script per configurare e installare Bro IDS, Elasticsearch, Logstash, Kibana e Critical Stack su qualsiasi dispositivo. Per maggiori informazioni sull'installazione e su come funziona Sweet Security, consulta la Wiki: https://github.com/TravisFSmith/SweetSecurity/wiki Installazione:...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

ThreadStackSpoofer

Thread Stack Spoofing / Call Stack Spoofing PoC Una implementazione PoC per una tecnica avanzata di evasione in-memory che falsifica lo Stack dei Thread. Questa tecnica permette di bypassare le regole di esame della memoria basate sui thread e nascondere meglio gli shellcode mentre sono in memori...

SilentMoonwalk

SilentMoonwalk PoC-Implementierung eines vollständig dynamischen Call-Stack-Spoofers TL;DR SilentMoonwalk ist eine PoC-Implementierung eines vollständig dynamischen Call-Stack-Spoofers, der eine Technik implementiert, um den ursprünglichen Aufrufer aus dem Call-Stack zu entfernen, indem ROP...

NemoClaw

NVIDIA NemoClaw: Stack di Riferimento per Agenti AI in Sandbox in OpenShell NVIDIA NemoClaw è uno stack di riferimento open source per eseguire agenti AI sempre attivi in modo più sicuro all'interno di sandbox NVIDIA OpenShell. Fornisce onboarding guidato, un blueprint rafforzato, inferenza...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

ligolo-ng

Ligolo-ng : Tunneling like a VPN An advanced, yet simple, tunneling tool that uses TUN interfaces. 📑 Ligolo-ng Documentation Setup/Quickstart !TIP Ligolo-ng 0.8 added a lot of new features, including: 🌐 API and a beautiful Web Interface thanks to L'ami du Raisin, allowing multiplayer! ⚙️ Simple...

tpotce

T-Pot - La piattaforma multi-honeypot tutto in uno T-Pot è la piattaforma honeypot tutto in uno, opzionalmente distribuita, multiarch amd64, arm64, che supporta oltre 20 honeypot e innumerevoli opzioni di visualizzazione utilizzando Elastic Stack, mappe animate degli attacchi in tempo reale e mol...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

wazuh

Wazuh Wazuh é uma plataforma gratuita e de código aberto usada para prevenção, detecção e resposta a ameaças. É capaz de proteger cargas de trabalho em ambientes locais, virtualizados, conteinerizados e baseados em nuvem. A solução Wazuh consiste em um agente de segurança de endpoint, implantado...

masscan

MASSCAN: Mass IP port scanner This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine. Its usage parameters, output is similar to nmap, the most famous port scanner. When in doubt, try one of tho...

CVE-2026-79902

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...

CVE-2026-79902

A flaw in the Seattle FilmWorks plugin within GIMP allows denial of service when a user opens a specially crafted SFW image file . The root cause is a Variable-Length Array (VLA) allocation on the stack that lacks integer overflow/underflow checks, resulting in an unbounded stack allocation and a...

CVE-2026-77658

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

windows_kernel_shadow_stack

Prove di concetto Questo progetto mira a evidenziare alcuni aspetti della mitigazione shadow stack implementata da Microsoft in Windows 11. Il codice è specificamente focalizzato su Windows 11 24H2. Potrebbe non funzionare su altre versioni di Windows 11, a causa della gestione degli offset del...

Weggli_rules_SSTIC2023

Ecco un elenco curato di query weggli Puoi leggerle e usarle una per una, oppure lanciarle in batch: Uso: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ Ci sono tre categorie: 1. funzioni pericolose: come strcpy, system, ecc.. 2. stack : tenta di...

CVE-2026-77658 Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...