543 matches found
openclarity
OpenClarity es una herramienta de código abierto para la detección sin agente y la gestión de la lista de materiales de software SBOM de máquinas virtuales, así como de amenazas de seguridad como vulnerabilidades, exploits, malware, rootkits, configuraciones incorrectas y secretos filtrados. Únet...
trivy-enforcer
trivy-enforcer EXPERIMENTAL Kubernetes Operator for Image Assurance It works as Admission Controller protecting unsafe images from being deployed Custom Controller watching ImageVulnerability CRD and scanning the image in the custom resource automatically Setup $ kubectl apply -f manifests/opa.ya...
nessus-vulnerability-scanning-lab
Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...
CVE-2024-3400
CVE-2024-3400 Finding Palo Alto devices vulnerable to CVE-2024-3400. options: -h, --help show this help message and exit -r IP, --ip IP IP address for single request -R FILE, --file FILE File path containing list of IP addresses...
bom-view
BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...
webenum-ng
webenum-ng L'equivalent web de enum4linux-ng : un seul orch...
Nuclei_Templates
🎯 Nuclei Templates A large personal collection of 50,000+...
web-attack-log-analyzer
Web Server Log Analyzer — Web Attack Detection A Python tool...
Characterizing Network Centralization and Observability in the Remote MCP Ecosystem
The Model Context Protocol MCP has emerged as the dominant interface for connecting autonomous agents to external data sources and execution environments. The ecosystem's transition from local process execution to remote Streamable HTTP deployments introduces unmeasured architectural and security...
ImpactSword
ImpactSword – Red Team Edition ImpactSword is an offensive se...
zaproxy w2026-09-03
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
installer v13.37.0
Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...
openvas-scanner v23.50.24
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...
When Verified Source Becomes Attack Input: Defending Smart Contracts against LLM-Based Vulnerability Scanning
Smart contracts are financial programs deployed on blockchains to manage digital assets. To build trust with users and investors, smart contract projects typically publish their source code on blockchain explorers and verify it against the deployed bytecode, making the on-chain program accessible...
promptfoo v0.122.1
Promptfoo: LLM evals & red teaming promptfoo is a CLI and library for evaluating and red-teaming LLM apps. Stop the trial-and-error approach - start shipping secure, reliable AI apps. Website · Getting Started · Red Teaming · Documentation · Discord Promptfoo is now part of OpenAI. Promptfoo...
cli v1.1307.0
Getting started with the Snyk CLI Introduction to the Snyk CLI Snyk is a developer-first, cloud-native security tool to scan and monitor your software development projects for security vulnerabilities. Snyk scans multiple content types for security issues: Snyk Open Source: Find and automatically...
trivy-operator v0.34.0
Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...
Nettacker v0.4.1
OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...