49 matches found
gaia
Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...
c-sentinel
C-Sentinel Semantic Observability for UNIX Systems A lightweight, portable system prober written in C that captures "system fingerprints" for AI-assisted analysis of non-obvious risks. Features auditd integration, explainable risk scoring, and a live web dashboard with enterprise-grade multi-user...
skills
Trail of Bits Skills Marketplace A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility. Also see: claude-code-config ·...
radmin-vpn-linux
Radmin VPN for Linux Run Radmin VPN on Linux via Wine. Join VPN networks, see peers, play games — all without a Windows VM. I did not build this because it was easier than a VM. I built it because I thought it was easier than a VM. AI-assisted code. Built collaboratively between a human and Claud...
exploitarium
https://discord.gg/WytKH65ZR únete para investigación, ayuda, documentación y más información útil para los interesados. Declaración Este repositorio estaba incompleto cuando se publicó. En cuanto al uso de IA, mi flujo de trabajo de fuzzing fue automatizado por IA con un flujo de trabajo estrict...
analise-vulnerabilidades-zabbix-notebooklm
🛡️ SQLi Vulnerability Analysis in Zabbix with NotebookLM Thematic Notebook developed as a deliverable for the DIO Project Challenge Using NotebookLM as an active AI tool for curation, synthesis, and organization of knowledge in Cybersecurity 📋 Table of Contents Context and Objectives Source...
ReArk
ReArk English | 简体中文 ReArk is a desktop reverse engineering and AI-assisted analysis tool for HarmonyOS and Android applications. Open HarmonyOS .hap, .app, and .abc files or Android .apk and .aab packages to inspect code, resources, metadata, and application behavior in one workspace. Combine...
tomcat-cve-2025-24813-lab
Apache Tomcat CVE-2025-24813 Local Reproduction Record For local authorized experiments, patch understanding, and defensive validation only. Do not send requests to unauthorized targets. This project records the reproduction process of CVE-2025-24813 on a local Apache Tomcat 9.0.98 instance: usin...
badger-builder
badger-builder badger-builder es una herramienta asistida por IA para generar perfiles dinámicos de Brute Ratel C4. Simplemente proporciona a badger-builder un flavor para el perfil deseado y consultará a OpenAI para obtener configuraciones adecuadas. Configuraciones de perfil de listener/payload...
gstack
gstack "I don't think I've typed like a line of code probably since December, basically, which is an extremely large change." — Andrej Karpathy, No Priors podcast, March 2026 When I heard Karpathy say this, I wanted to find out how. How does one person ship like a team of twenty? Peter Steinberge...
Research-on-CVE-2025-9998
Research-on-CVE-2025-9998 vulnerability in CVE 2025-9998 and solution for those vulnerability with help artificial intelligence...
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence AI company has branded Generative...
Linux Distros Unpatched Vulnerability : CVE-2026-46352
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence AI to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoint Cyber and...
PT-2026-81205
U-Boot before 2026.10-rc3 with CONFIG IP DEFRAG enabled contains an out-of-bounds write vulnerability in the net defragment function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash t...
PT-2026-81204
My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...
PT-2026-81199
OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211 michael mic failure function within sys/net80211/ieee80211 crypto tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated b...
PT-2026-81207
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs read directory table function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablks count value that causes heap buffer under-allocation...
PT-2026-81214
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6 parse options that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers on the local network can send crafted DHCPv6 ADVERTISE or REPLY packets during netboot to corrupt memory and crash the...
