CDK

CDK - ゼロ依存コンテナペネトレーションツールキット 英語 | 简体中文 法的免責事項 事前の相互同意なしにCDKを使用してターゲットを攻撃することは違法です。CDKはセキュリティテスト目的のみに使用されます。 概要 CDKは、オープンソースのコンテナペネトレーションツールキットであり、OSに依存せずに様々なスリム化されたコンテナで安定したエクスプロイトを提供するように設計されています。便利なネットツールと多くの強力なPoC/EXPが付属しており、コンテナからの脱出やK8sクラスターの乗っ取りを容易にします。 クイックスタート cdk eva...

SentinelNav

SentinelNav SentinelNav는 의존성이 없는 순수 Python 바이너리 시각화 및 포렌식 도구입니다. 바이너리 데이터를 대화형 스펙트럼 맵으로 변환하여 분석가가 파일 구조, 엔트로피 이상, 코드 섹션 및 잠재적인 암호화 블롭을 시각적으로 식별할 수 있도록 합니다. 다중 처리 백엔드를 사용하여 파일을 빠르게 스캔하고, 로컬 웹 기반 프론트엔드를 통해 대화형 탐색, 16진수 검사 및 아키텍처 핑거프린팅을 제공합니다. 빠른 시작 SentinelNav는 Python 표준 라이브러리만 사용하므로 외부 패키지 설치가 필요하...

local-mcp

local-mcp 로컬 파일 작업을 위한 제로 의존성 MCP 서버. 13개의 파일시스템 도구 + 점진적 탐색을 위한 3개의 메타 도구 — SDK, 프레임워크, npm install이 필요 없습니다. MCP 프로토콜: 2024-11-05 · 전송: stdio + Streamable HTTP · 런타임: Node.js ≥ 22.0.0 아키텍처 local-mcp.mjs — 595 lines, 13 tools, entry point lib/mcp-core.mjs — 229 lines, stdio + HTTP transport, 9 M...

reasongate v0.4.0

ReasonGate A self-hostable gate that inspects the text going into and out of an LLM and returns an explainable allow / flag / block decision with a machine-readable audit record for every call. What this is The open-source core is rule-based. It does four things: recognizes known prompt-injection...

ps4host

PS4Host A zero-dependency PS4 WebKit exploit host with a...

Exploit for CVE-2026-66066

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-fi...

Malicious code in hey-base32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bbdc771de9f99f6454831cc2cd8c22f0af88dfeb3ec66a6c4d3b174c860517 The package advertises itself as a zero-dependency base32 encoder/decoder, but its CLI entry point bin/hey-base32.js starts a remote-access tunnel on...

MAL-2026-5398 Malicious code in hey-base32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bbdc771de9f99f6454831cc2cd8c22f0af88dfeb3ec66a6c4d3b174c860517 The package advertises itself as a zero-dependency base32 encoder/decoder, but its CLI entry point bin/hey-base32.js starts a remote-access tunnel on...

jwt-pwn

jwt-pwn A zero-dependency Python 3 toolkit for discovering an...

CDK

It is an offensive tool for container exploitation. The primary CVE ID is not explicitly stated in the provided context, but the tool is designed for container exploitation, which may involve various vulnerabilities. The tool, CDK, is a zero-dependency container penetration toolkit that offers...

Node.js third-party modules: Prototype pollution attack in just-extend

I would like to report a prototype pollution vulnerability in just-extend It allows an attacker to inject properties on Object.prototype. Module module name: just-extend version: 2.1.0, and 3.0.0 npm page: https://www.npmjs.com/package/just-extend Module Description Part of a library of...