154 matches found
awesome-ai-security
awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...
CVE-2026-42978-PoC-Research
CVE-2026-42978 面向 AI 安全工具的 Windows 推送通知模块 下一代 AI 安全生态系统、多协议终端与自主代理套件 网站 · 产品文档 · 宿主应用 · 社区聊天 网站导航： 首页 · 更新 · 下载 · 模块 官方宿主应用 产品： AI Security Tool 站点： zerodayevil.github.io 文档： https://zerodayevil.github.io/ai-security-tool 本模块是面向 AI Security Tool 的经审核分析报告与安全检查配置 。 仅使用项目站点或官方目录中列出的模块。请在经批准的应用程序内...
CVE-2026-21858-n8n-FullChain
🛡️ Módulo de Herramienta de Seguridad de IA Cadena Completa de n8n CVE-2026-21858 + CVE-2025-68613 — "Ni8mare" Módulo Oficial de Auditoría de Seguridad para el Ecosistema de Herramientas de Seguridad de IA...
Threat_Model_Examples
威胁模型示例 本仓库包含针对不同技术和系统的各种威胁模型示例。这些资源提供了跨多个领域的威胁模型示例，帮助安全专业人员、开发人员和研究人員更好地理解如何有效运用威胁建模来应对安全风险。 该项目旨在展示威胁模型的最终成果可能呈现的样子。尽管已有大量指南和方法论，我们注意到具体的示例能够帮助社区更好地理解“好”是什么样的。 🛡️ Web 与 API 安全 OAuth 2.0 OAuth 2.0 威胁模型 RFC 6819 SSL DNSSEC、DoT 与 DoH DNSSEC、DoT 与 DoH 威胁模型 Web 应用程序 OWASP 威胁建模流程 🧠 AI 安全 生成式 AI 工作负载 -...
ai-security-battle
🤖 AIセキュリティバトルシステム レッドチーム vs ブルーチーム：敵対的ML戦闘シミュレーション レッドチームの攻撃者とブルーチームの防御者が30分間のAI/MLセキュリティ戦闘シナリオで戦う、包括的な敵対的機械学習セキュリティシミュレーションです。 🎯 プロジェクト概要 このシステムは、以下のような現実世界のAI/MLセキュリティシナリオをシミュレーションします： 🔴 レッドチーム は高度な攻撃（敵対的入力、モデル抽出、回避）を実行 🔵 ブルーチーム はMLベースの防御（異常検知、レート制限、入力検証）を展開...
AI_Security_Top
🛡️ AI-Security-Knowledge-Base 这是一个系统性的 AI 安全研究项目，涵盖了从基础机器学习算法理论到前沿大模型注入攻击、AI 免杀对抗及深度伪造（Deepfake）的完整知识体系。 🏗️ 知识体系架构 本库内容分为四大板块：AI 核心算法 、威胁建模 、红队进攻 及蓝队防御 。 🧬 一：AI 基础与理论 深入理解模型背后的数学逻辑，是寻找算法漏洞的前提。 AI 概论 - 人工智能发展史、分支及核心概念。 深度学习架构 - 从 CNN/RNN 到 Transformer 架构的深度解构。 核心机器学习算法 -...
PENTEST-LAB
PENTEST-LAB 一个现代化的易受攻击应用与网络靶场，用于通过动手攻击链学习 Web、API、云、 AI 和蓝队安全 。 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║ ██╔══██╗██╔════╝████╗ ██║╚══██╔══╝██╔════╝██╔════╝╚══██╔══╝ ║ ║ ██████╔╝█████╗ ██╔██╗ █...
bx2-writeups
安全文章 我的网络安全文章合集，涵盖： TryHackMe Hack The Box Linux 权限提升 AI 与基础设施安全 CTF 安全挑战 作者：Nanashi Bx2...
awesome-ai-security — Updated!
awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...
ship-safe v9.7.5
The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...
SecureAI-Scan v0.10.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
The OWASP LLM Top 10 Was the Warm-Up: What Comes Next
This is Post 3 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 2: Generative AI Security: Why AI Needs a New Kind of Security. When the OWASP Top 10 for LLM Applications arrived, it did the industry a real service. It gave security tea...
What 50 open source projects taught us about security in the AI era
AI is changing the pace of open source development and the security challenges that come with it. Maintainers are reviewing unfamiliar contributions, managing new attack surfaces, and responding to vulnerabilities with limited time and resources. Session 4 of the GitHub Secure Open Source Fund...
Why Generative AI Needs a New Kind of Security
This is Post 2 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of ...
SecureAI-Scan v0.8.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
pentest-ai-agents v3.4.0
pentest-ai-agents 50 Claude Code subagents for penetration testing. Quick Start | Cheatsheet | Coverage | Agents | Examples Table of Contents What's New in v3.3 What's New in v3.2 Agent Map What's New in v3.1 Quick Start Cheatsheet Coverage Agents Tier 1 vs Tier 2 Examples Running Tools in a...
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself
An agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK's AI Security Institute. When a bystander publicly warned that the code was malicious, the agent denied it, force-pushed a rewritt...
SecureAI-Scan v0.7.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
The Network Has Become the Control Plane for AI Security
Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively stable model: users connect to applications,...
