opentaint

El motor de analisis de taint de codigo abierto para la era de la IA Analisis de taint formal para la seguridad de aplicaciones — encuentra lo que los motores de coincidencia de patrones AST pasan por alto, permite a los agentes LLM aplicar vulnerabilidades como reglas, escala donde ninguno puede...

promptfoo

Promptfoo: evaluaciones de LLM y red teaming promptfoo es una CLI y biblioteca para evaluar y hacer red teaming de aplicaciones basadas en LLM. Deja de usar prueba y error... empieza a desplegar agentes seguros y confiables Sitio web · Primeros pasos · Red Teaming · Documentación · Discord...

CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE CVSS 10.0 CVSS 10.0 Critical · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck Summary Minds Platform the open-source backend of mindsdb/mindshub, previously mindsdb/minds-platform exposes POST /api/v1/responses/ an OpenAI-compatible...

CC_Watermark

Optimal Couplings for Distortion-Free Text Watermarking The official code of Optimal Couplings for Distortion-Free Text Watermarking Abstract Large-language models LLMs are now able to produce text that is indistinguishable from human-generated content. This has fueled the development of watermar...

cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie Qué es Cowrie Cowrie es un honeypot SSH y Telnet de interacción media a alta diseñado para registrar...

pyghidra-mcp

PyGhidra-MCP - Servidor del Protocolo de Contexto de Modelo para Ghidra Descripción general pyghidra-mcp es un servidor de línea de comandos del Protocolo de Contexto de Modelo MCP que lleva todo el poder analítico de Ghidra, una robusta suite de ingeniería inversa de software SRE, al mundo de lo...

osmedeus

Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...

promptmap

O O o.-. ¡Humanos, no os resistáis! |/ ,-'-. / /, / /|.-.| / --O-- .--"""/\ /\ | o.o / De Utku Sen /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /|| | ./| || , | .// / / |-----| || | | || || promptmap2 es un escáner automatizado de inyección de instrucciones par...

skyvern

🐉 Automatiza flujos de trabajo basados en navegador usando LLMs y Visión por Computadora 🐉 Skyvern automatiza flujos de trabajo basados en navegador utilizando LLMs y visión por computadora. Proporciona un SDK compatible con Playwright que añade funcionalidad de IA sobre Playwright, así como un...

CVE-2026-108863 Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...

EUVD-2026-97014

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

llm-guard

!WARNING THIS PROJECT HAS BEEN ARCHIVED. This project and its associated models on Hugging Face are no longer under active development or maintained. LLM Guard - The Security Toolkit for LLM Interactions LLM Guard by Protect AI is a comprehensive tool designed to fortify the security of Large...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

antisquat

AntiSquat AntiSquat aprovecha técnicas de inteligencia artificial como el procesamiento del lenguaje natural NLP, grandes modelos de lenguaje ChatGPT y más para potenciar la detección de dominios de typosquatting y phishing. Cómo usar Clona el proyecto mediante git clone...

r2ai

R2AI - Reversing potenziato con LLM per radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Componenti Questo repository...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

stride-gpt

STRIDE GPT è uno strumento di threat modelling basato sull'IA che sfrutta i Large Language Models LLM per generare modelli di minaccia e alberi di attacco per una determinata applicazione basandosi sulla metodologia STRIDE. Gli utenti forniscono i dettagli dell'applicazione, come il tipo di...

beelzebub

Beelzebub Framework runtime di deception Beelzebub è un runtime di deception open-source che distribuisce servizi esca adattivi basati su LLM sui protocolli SSH, HTTP, TCP, TELNET e MCP. Va oltre i semplici honeypot passivi ingaggiando attivamente gli attaccanti in interazioni realistiche,...

redteam-ai-benchmark

Red Team AI Benchmark Russian version: README.ru.md Red Team AI Benchmark is a CLI model-evaluation benchmark. It measures how LLMs understand and respond to red-team questions and security scenarios; it is not a tool for carrying out those activities. Version 2 uses a rubric-based dataset instea...