nebula

Nebula AI Powered Pentesting The Zero Layer workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

EUVD-2026-87483

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...

EUVD-2026-87507

OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

GHSA-W7C2-W76W-5HMJ vulnerabilities

Vulnerabilities for packages: kubescape, hubble-ui, kubescape-operator, hubble, cilium...

starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

GeckoDroid

GeckoDroid Cliente móvil para Adaptix C2 Framework. Acceso completo de operador desde tu dispositivo Android. Qué hace GeckoDroid te da control sobre tu servidor Adaptix C2 desde cualquier lugar. En lugar de estar frente al cliente de escritorio, puedes gestionar las operaciones sobre la marcha...

trivy-operator

Kubernetes 原生安全工具包。（文档） 简介 Trivy Operator 利用 Trivy 持续扫描您的 Kubernetes 集群以发现安全问题。扫描结果以 Kubernetes 自定义资源定义的形式汇总为安全报告，可通过 Kubernetes API 访问。该 Operator 通过监视 Kubernetes 的状态变化并自动触发安全扫描来工作。例如，当创建新的 Pod 时，会启动漏洞扫描。 这样，用户就可以以 Kubernetes 原生的方式查找和查看与不同资源相关的风险。 集群内安全扫描 Trivy Operator 自动生成并更新安全报告。这些报告是针对...

chaos-operator

Litmus chaos-operator para inyectar experimentos de caos en Kubernetes Codacy Badge...

sliver-gui

Sliver GUI Una consola de operador de escritorio para el framework Sliver C2 en el espíritu de Cobalt Strike y Havoc. Diseñada y desarrollada por Raj Kumar Mullapudi Sliver GUI es un frontend ligero de Wails v2 Go + HTML/CSS/JS plano sobre el servicio gRPC rpcpb.SliverRPC existente de Sliver. No...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – Fuga de información de coincidencias SQLite FTS3 mediante manipulación de consultas Código del programa Python root@kitploit: sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USI...

atomic-operator

license atomic-operator 此 Python 包用于在多种操作系统环境中执行 Atomic Red Team 测试（Atomics）。 新增内容？ 为什么？ atomic-operator 使安全专业人员能够针对 atomic-red-team 中定义的既定技术测试其检测和防御能力。通过使用 atomic-operator 这样的测试框架，您可以识别自己的防御能力以及防御覆盖范围的缺口。 此外，atomic-operator 还可用于许多其他场景，例如： 生成警报以测试产品 测试 EDR 和其他安全工具 从对手角度识别执行防御规避的方法 等等。 特性 支持在...

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

backup_dc_registry

Copia de seguridad del registro de Backup Operator para comprometer el dominio Un POC simple que abusa de los privilegios de Backup Operator para volcar de forma remota las hives SAM, SYSTEM y SECURITY. Créditos de la investigación: @filipdragovic Portado del PoC de Windows de @mpgn Uso Esta prue...

Fortigate-SSL-VPN-Exploit-Kit

Kit de FortiGate SSL-VPN recuperado en la naturaleza Archivo de investigación. Recuperado tal como se encontró. Yo no escribí estos archivos. Publicado: 1 de septiembre de 2026 Este repositorio es el orquestador, los payloads de segunda etapa y los listeners de operador que se sitúan sobre un...

freebsd-CVE-2026-7270

Ref https://github.com/califio/publications/tree/main/MADBugs/freebsd-CVE-2026-7270 CVE-2026-7270 Escalada de privilegios local en FreeBSD medianteexecargsadjustargs con memmove fuera de límites Un error de precedencia de operadores en execargsadjustargs sys/kern/kernexec.c, presente desde 2013...