owLSM

🛡️ owLSM aspires to become the gold standard for prevention and detection for Linux 🛡️ owLSM is an eBPF LSM agent that implements a stateful Sigma rules engine focused on prevention. What is the project: owLSM focuses on three main things: 1 Prevention capabilities using a Sigma Rules Engine...

zeek

The Zeek Network Security Monitor...

raider

Быстрые ссылки Сайт. Страница OWASP. Документация. Установка. FAQ. Начало работы. Архитектура. Обсуждения. Issues. Twitter. Fediverse. Что такое Raider OWASP Raider был разработан с целью улучшить тестирование веб-аутентификации. Со временем он развился и теперь может использоваться для любых...

restler-fuzzer

RESTler Qu'est-ce que RESTler ? RESTler est le premier outil de fuzzing d'API REST stateful pour tester automatiquement les services cloud via leurs API REST et trouver des bugs de sécurité et de fiabilité dans ces services. Pour un service cloud donné avec une spécification OpenAPI anciennement...

firehol

FireHOL http://firehol.org/ root@kitploit: FireHOL — межсетевой экран с отслеживанием состояния и фильтрацией пакетов на основе iptables для людей! FireQOS — формирователь полосы пропускания на основе TC для людей! Git Эти инструкции предназначены для тех, кто работает с git-репозиторием. Более...

kitty

Introduction | Sulley: Boo? | Boo: Kitty! What is Kitty? Kitty is an open-source modular and extensible fuzzing framework written in python, inspired by OpenRCE's Sulley and Michael Eddington's and now Deja Vu Security's Peach Fuzzer . Goal root@kitploit: When we started writing Kitty, our goal w...

pulsar

PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...

pulsar

PULSAR Apprentissage de protocole, simulation et fuzzer avec état Pulsar est un fuzzer réseau doté de capacités d'apprentissage automatique et de simulation de protocole. L'outil permet de modéliser un protocole via des techniques d'apprentissage automatique, telles que le clustering et les modèl...

redxor

Linux Malware C2 'RedXOR' - пример обнаружения Этот пакет служит демонстрацией того, как Zeek можно использовать для обнаружения Linux-бэкдора "redXOR" с помощью методов, основанных на состоянии. Ссылки: Блог Corelight...

ICMPTunnel

icmptunnel ist ein Werkzeug, um IP-Verkehr in ICMP-Echo-Anfrage- und -Antwortpaketen Ping zu tunneln. Es ist dafür gedacht, Firewalls auf halb verdeckte Weise zu umgehen, beispielsweise beim Pivoting in einem Netzwerk, in dem Ping erlaubt ist. Es könnte auch für den ausgehenden Datenverkehr Egres...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: The issue of underflow in the chain reference counter was fixed. The error in adding elements in the set element path causes the reference counter to be decremented twice—once when releasing an element and...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables – A memory leak occurred during the stateful object update. Stateful objects can be updated from the control plane. The transaction logic allocates a temporary object for this purpose. The -init function wa...

ALPINE-CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

AZL-94655 CVE-2026-71225 affecting package libkcapi 1.5.0-2

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

CVE-2026-41710

A flaw was found in Spring Retry. A remote attacker can craft a large number of unique requests, leading to the exhaustion of the application-wide stateful retry cache. Once the cache is full, it permanently rejects further updates, causing all subsequent stateful retries and circuit breakers in...

PT-2026-65550

Name of the Vulnerable Software and Affected Versions terraform-mcp-server versions prior to 1.1.0 Description An authorization bypass exists in the streamable-HTTP stateful transport mode. This issue allows a user who obtains another user's MCP session ID to execute tool calls using the...

GHSA-J8GR-8FP3-5Q5H Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR Microsoft.AspNetCore.App.Runtime. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR Microsoft.AspNetCore.App.Runtime. This advisory also provides guidance on what...

SUSE CVE-2026-63941

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCREL2 provided by a guest hypervisor ZCREL2 can be updated by a VHE guest hypervisor either using ZCREL2 which traps or ZCREL1 which does not trap. KVM handles both in different way: - on ZCREL2 trap,...