Herramientas para operar, no para hojear.
Utilidades 100% del lado del cliente para analistas SOC y threat hunters. Nada de lo que pegues aquí sale de tu navegador.
Por Eduardo Olivares — complemento de eduolihez.com
Herramientas
Siete utilidades del lado del cliente, más dos proyectos hermanos alojados en eduolihez.com. KEV Watch vive aquí mismo, no detrás de un enlace.
- 01Abrir Herramienta
01IOC Defanger & Extractor
Desarma (defang) e higieniza de forma segura direcciones IP, URLs y correos electrónicos para tus informes, o extrae IOCs directamente desde texto crudo en segundos.
- 02Abrir Herramienta
02Email Header Analyzer
Analiza cabeceras crudas de correos sospechosos o ficheros .eml de forma visual. Comprueba la autenticación SPF, DKIM, DMARC y representa los saltos de red.
- 03Abrir Herramienta
03Generador de Reglas YARA
Escribe y valida reglas de detección YARA sin errores de sintaxis a través de un asistente paso a paso con analizador (linter) integrado en tiempo real.
- 04Abrir Herramienta
04Playbooks Interactivos
Árboles de decisión interactivos para diagnosticar incidentes de seguridad (Phishing, Malware, Fuerza Bruta) con recomendaciones y consultas SIEM automáticas.
- 05Abrir Herramienta
05Payload Decoder & Deobfuscator
Decodifica Base64 (UTF-8/UTF-16LE), URL, Hex y desofusca scripts de PowerShell limpiando concatenaciones y backticks de forma local.
- 06Abrir Herramienta
06OSINT Hub & Enlaces Externos
Genera consultas rápidas OSINT extrayendo y vinculando IPs, dominios y hashes a motores externos (VirusTotal, AbuseIPDB) con directorio de recursos.
- 07Ver aquí abajo
07KEV Watch
Vigilancia automatizada (GitHub Actions) del catálogo CISA KEV: vulnerabilidades con explotación activa confirmada, integrada aquí mismo, sin salir de la página.
- 08Ir a eduolihez.com
08Password Sentinel
Visita el proyecto oficial de tu extensión de Chrome para auditar contraseñas y verificar filtraciones vía API de Have I Been Pwned.
- 09Ir a eduolihez.com
09FollowGuard OSINT
Visualiza el desarrollo de tu herramienta de ciberinteligencia en redes sociales para detectar perfiles falsos y bots.
KEV Watch
Vigilancia automatizada del catálogo CISA KEV: vulnerabilidades con explotación activa confirmada, no CVEs teóricos. Un GitHub Action descarga el catálogo, calcula qué ha cambiado y redespliega esta misma página — sin intervención manual.
| CVE | Producto | Vulnerabilidad | Plazo |
|---|---|---|---|
| CVE-2026-102764BeyondTrust | Remote Support | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 19 oct 2026 |
| CVE-2025-61624Fortinet | Multiple Products | Fortinet Multiple Products Path Traversal Vulnerability | 19 oct 2026 |
| CVE-2026-21589Atlassian | Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 18 oct 2026 |
| CVE-2026-105134Ahsay | AhsayCBS | Ahsay AhsayCBS Command Injection Vulnerability | 17 oct 2026 |
| CVE-2026-76519Cisco | Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 17 oct 2026 |
| CVE-2026-105133Ahsay | AhsayCBS | Ahsay AhsayCBS Improper Authentication Vulnerability | 17 oct 2026 |
| CVE-2026-0322Palo Alto Networks | PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | 17 oct 2026 |
| CVE-2026-104935Ivanti | Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 16 oct 2026 |
| CVE-2026-96951Microsoft | Windows | Microsoft Windows Command Injection Vulnerability | 16 oct 2026 |
| CVE-2015-5477ISC | BIND | ISC BIND Data Processing Errors Vulnerability | 11 oct 2026 |
| CVE-2016-3081Apache | Struts | Apache Struts Command Injection Vulnerability | 11 oct 2026 |
| CVE-2023-22894Strapi | Strapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | 11 oct 2026 |
| CVE-2021-3199ONLYOFFICE | Docs | ONLYOFFICE Docs Server Path Traversal Vulnerability | 11 oct 2026 |
| CVE-2015-3306ProFTPD | ProFTPD | ProFTPD Improper Access Control Vulnerability | 11 oct 2026 |
| CVE-2026-88779Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 07 oct 2026 |
| CVE-2026-102490Zammad GmbH | Zammad | Zammad GmbH Zammad Improper Privilege Management Vulnerability | 05 oct 2026 |
| CVE-2026-102489Zammad GmbH | Zammad | Zammad GmbH Zammad Session Fixation Vulnerability | 05 oct 2026 |
| CVE-2026-104286Fortinet | FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 04 oct 2026 |
| CVE-2026-76504Cisco | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 03 oct 2026 |
| CVE-2026-86950Apple | Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | 13 oct 2026 |
| CVE-2026-88772Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 30 sept 2026 |
| CVE-2026-88771Citrix | NetScaler | Citrix NetScaler Improper Input Validation Vulnerability | 30 sept 2026 |
| CVE-2026-67279MikroTik | RouterOS | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 28 sept 2026 |
| CVE-2026-65660Microsoft | SharePoint | Microsoft SharePoint Code Injection Vulnerability | 28 sept 2026 |
| CVE-2026-87902WordPress | Core | WordPress Core Remote File Inclusion Vulnerability | 28 sept 2026 |
| CVE-2026-5430WSO2 | Multiple Products | WSO2 Multiple Products Path Traversal Vulnerability | 27 sept 2026 |
| CVE-2026-71362Adobe | Commerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | 27 sept 2026 |
| CVE-2026-93952Arista | VeloCloud Orchestrator | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 25 sept 2026 |
| CVE-2026-94127F5 | BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 25 sept 2026 |
| CVE-2026-93616Check Point | Multiple Products | Check Point Multiple Products Path Traversal Vulnerability | 25 sept 2026 |
| CVE-2026-85102Check Point | Multiple Products | Check Point Multiple Products Improper Certificate Validation Vulnerability | 25 sept 2026 |
| CVE-2026-7273Zyxel | GS1900 Series Switches | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 24 sept 2026 |
| CVE-2025-39964Linux | Kernel | Linux Kernel Race Condition Vulnerability | 21 sept 2026 |
| CVE-2026-53266Linux | Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 21 sept 2026 |
| CVE-2025-39682Linux | Kernel | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 21 sept 2026 |
| CVE-2026-58704Google | Pixel | Google Pixel Improper Authorization Vulnerability | 19 sept 2026 |
| CVE-2026-76460Cisco | Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 19 sept 2026 |
| CVE-2026-87886Acronis | Backup | Acronis Backup Incorrect Default Permissions Vulnerability | 19 sept 2026 |
| CVE-2026-76461Cisco | Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | 17 sept 2026 |
| CVE-2026-84869ConnectWise | ScreenConnect | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 14 sept 2026 |
| CVE-2026-42016JFrog | Artifactory | JFrog Artifactory Incorrect Authorization Vulnerability | 25 sept 2026 |
| CVE-2026-42018JFrog | Artifactory | JFrog Artifactory Improper Authentication Vulnerability | 25 sept 2026 |
| CVE-2026-85706GitLab | Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 14 sept 2026 |
| CVE-2026-86060MikroTik | RouterOS | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | 13 sept 2026 |
| CVE-2026-67277MikroTik | RouterOS | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | 13 sept 2026 |
| CVE-2026-19490Citrix | NetScaler | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 12 sept 2026 |
| CVE-2025-25249Fortinet | Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 12 sept 2026 |
| CVE-2026-87491Google | Chromium V8 | Google Chromium V8 Out of Bounds Write Vulnerability | 23 sept 2026 |
| CVE-2026-20079Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 12 sept 2026 |
| CVE-2026-75650Adobe | Commerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 11 sept 2026 |
| CVE-2026-81963Microsoft | Windows | Microsoft Windows Link Following Vulnerability | 22 sept 2026 |
| CVE-2026-86218N-able | N-central | N-able N-central Static Code Injection Vulnerability | 11 sept 2026 |
| CVE-2026-85880Microsoft | Windows | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 22 sept 2026 |
| CVE-2026-85046Google | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 18 sept 2026 |
Fuente: CISA Known Exploited Vulnerabilities Catalog ·Ver el proyecto que genera estos datos →