tpotce

T-Pot - Die All-In-One Multi-Honeypot-Plattform T-Pot ist die All-in-One, optional verteilte, Multiarch amd64, arm64 Honeypot-Plattform, die über 20 Honeypots und unzählige Visualisierungsoptionen mit dem Elastic Stack, animierte Live-Angriffskarten und viele Sicherheitstools unterstützt, um das...

h0neytr4p

Adattato per T-Pot Questo fork di h0neytr4p è stato revisionato per T-Pot con le seguenti funzionalità: Aggiunto supporto Docker Dockerfile, docker-compose.yml Utilizzo di un singolo file di log invece di due Log in JSON invece di CSV Arricchimento del file di log JSON con informazioni aggiuntive...

pacbot

Introduzione Il Policy as Code Bot PacBot è una piattaforma per il monitoraggio continuo della conformità, la reportistica di conformità e l'automazione della sicurezza per il cloud. In PacBot, le policy di sicurezza e conformità sono implementate come codice. Tutte le risorse scoperte da PacBot...

POC-S

POC-S: POC-T verbesserte Version Die Wiki-Dokumentation von POC-T befindet sich im doc-Verzeichnis Vorwort: Derzeit Rechtlicher Haftungsausschluss Ohne vorherige Zustimmung beider Parteien ist die Verwendung von POC-S zum Angriff auf ein Ziel illegal. POC-S dient ausschließlich...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests è un fuzzer HTTP basato su grammatica scritto come parte del paper intitolato "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" presentato ad ACM CCS 2021. BibTeX del paper: root@kitploit: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

rp

rp++: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries Overview rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures. Finding ROP gadgets To find ROP gadget you need to specify a file with the --file / -f option and use the...

Zhilly

AI Pentester Assistant 🛡️ Zhilly AI Pentester Assistant Strumento portatile di cybersicurezza e interazione cibernetica basato sull'IA Strumento portatile di cybersicurezza e interazione cibernetica basato sull'IA 🇬🇧 Inglese • 🇹🇷 Turco • ⚡ Web Flasher 🇬🇧 Inglese / Versione inglese 📖 Informazioni...

oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

DEBIAN-CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

Linux Distros Unpatched Vulnerability : CVE-2026-76014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOU...

Canadian Man Pleads Guilty in Snowflake Extortions

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake. Connor Riley Moucka , of Kitchener, Ontario, also...

UBUNTU-CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

CVE-2026-49158 Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-41608 Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-9147 uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata

uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields for example, streamer element names are interpolated into the generated Python source without safe quoting via repr or the !r...

CVE-2026-9147 uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata

uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields for example, streamer element names are interpolated into the generated Python source without safe quoting via repr or the !r...

JLSEC-2026-681 The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a...

The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-channel attacker with cache-line resolution. In a controlled environment such as Intel SGX, an attacker can gain a per instruction sub-cache-line resolution allowing them to break the...

CVE-2026-45068

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...