INTACT

Experimentos de Jailbreak Multi-Turno de SoK Este repositorio contiene la versión de publicación del código utilizado para los análisis de mecanismos en SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks. El repositorio ha sido recortado para conservar únicamente el código, los...

windows-malware-behavioral-analysis

使用 REMnux 与 FLARE-VM 进行恶意软件行为分析 一个实用的蓝队恶意软件调查项目，演示如何利用行为分析技术在隔离的实验室内安全地分析可疑的 Windows 可执行文件。 与对恶意软件源代码进行逆向工程不同，本项目侧重于观察运行时行为、收集主机与网络遥测数据、提取入侵指标（IOC），并将攻击者活动映射到 MITRE ATT&CK 框架。 目标 构建安全的恶意软件分析实验室 观察恶意软件执行期间的行为 监控 Windows 主机活动 捕获恶意网络流量 识别持久化机制 提取入侵指标（IOC） 将调查结果映射到 MITRE ATT&CK 挖掘检测机会 调查工作流程 阶段 1 —...

trufflehog v3.98.0

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

nuclei-cve-analyzer

Nuclei CVE Analyzer A fast CLI tool for analyzing CVE coverage in Nuclei templates. Nuclei CVE Analyzer takes a list of CVE IDs, scans a local Nuclei template repository, and determines which CVEs already have matching templates and which represent potential template coverage gaps. Built for...

trippy

Trippy combines the functionality of traceroute and ping and is designed to assist with the analysis of networking issues. Quick Start See the getting started guide. Install Trippy runs on Linux, BSD, macOS, and Windows. It can be installed from most package managers, precompiled binaries, or...

fickling

Fickling Fickling 是一个用于 Python pickle 对象序列化的反编译器、静态分析器和字节码重写器。你可以使用 fickling 来检测、分析、逆向工程，甚至创建恶意的 pickle 或基于 pickle 的文件，包括 PyTorch 文件。 Fickling 既可以作为 Python 库 使用，也可以作为 CLI 使用。 安装 保护 AI/ML 环境 通用恶意文件检测 高级用法 跟踪 pickle 执行 Pickle 代码注入 Pickle 反编译 PyTorch 多格式文件（polyglots） 更多信息 联系方式 安装 Fickling 已在 Python...

IPA

Analyse interactive de PDF L'analyse interactive de PDF également appelée IPA permet à tout chercheur d'explorer les détails internes de n'importe quel fichier PDF. Les fichiers PDF peuvent être utilisés pour transporter des charges malveillantes exploitant des vulnérabilités, ou des failles de...

obfuscation_analysis

Análisis de Ofuscación v1.3 Autores: Tim Blazytko & Nicolò Altamura Analiza y simplifica código ofuscado Descripción: Obfuscation Analysis es un plugin de Binary Ninja que elimina la dificultad de trabajar con binarios fuertemente protegidos. Incluye un puñado de asistentes enfocados que te...

third-thoughts

第三想法（Third Thoughts） 一个 Lightless Labs 研究项目，通过多学科语料库分析大规模研究 AI 智能体行为（说白了，就是把东西往墙上扔，看哪个能粘住）。 命名源于 Discworld 中 Tiffany Aching 的概念： 第一想法 （智能体的思考）、 第二想法 （智能体分析自身的思考）、 第三想法 （本项目分析上述思考 ）。 本仓库内容 Third Thoughts 分为两大部分，共享同一套语料库和方法论： 1. middens/ — 一个 Rust CLI，用于从 AI 智能体会话日志中提取行为模式。解析来自 Claude...

[SECURITY] Fedora 45 Update: frama-c-33.0-3.fc45

Frama-C is a suite of tools dedicated to the analysis of the source code of software written in C. Frama-C gathers several static analysis techniques in a single collaborative framework. The collaborative approach of Frama-C allows static analyzers to build upon the results already computed by...

Karma Pro 0.14

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...

Learning from Failures: A Failure-Driven Prompt Refinement for LLM-Based Vulnerability Analysis

Large Language Models have emerged as promising tools for software vulnerability analysis, but their effectiveness depends heavily on prompt design. Existing research primarily compares prompting strategies using aggregate performance metrics, providing limited insight into why models fail or how...

Where Does a Rust Speedup Come From? Language and Algorithm Effects in Sliding Window Threat Scorer

Rewriting a hot path from Python into Rust is a common way to speed up security analytics, and large speedups are routinely reported. A rewrite usually changes the language and the algorithm at once, so a single factor can credit the language with a gain that comes from a better algorithm. We stu...

Joern 4.0.649

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Systematically Optimized CNN-Transformer with Focal Loss for Imbalanced Intrusion Detection on NSL-KDD

Intrusion Detection Systems IDS struggle with imbalanced datasets like NSL-KDD, especially in detecting rare R2L and U2R attacks. This work describes a systematically optimized and explainable framework using a CNN-Transformer architecture to improve performance on highly imbalanced data. We...

static-arm-bins

static-arm-bins Una colección de binarios ARM compilados estáticamente para depuración y análisis en tiempo de ejecución. gdb-arm-static-7.11 gdbserver-armel-static-8.0.1 ldd-arm-static ltrace-arm-static-0.7.91 nc-arm-static nc-armel-static netstat-armel-static ifconfig-armel-static...

firmware-reverse-engineering

Habilidades de Ingeniería Inversa de Firmware Cinco habilidades de agente de OrbitCurve para extracción de firmware, análisis estático, ingeniería inversa con Ghidra, emulación y reportes de seguridad, por Hussein Muhaisen. La colección empaqueta los flujos de trabajo existentes, referencias,...

spookyssl-pcaps

PCAPs de SpookySSL y Cobertura de Red PCAPs o no sucedió Tras la reciente vulnerabilidad divulgada en OpenSSL v3.0 hasta v3.0.6 CVE-2022-3602, hemos investigado cómo se ve un intento de explotación 'en el cable'. Este repositorio contiene PCAPs de varios escenarios de explotación, así como reglas...

Broken-Vulnerable-Code-Snippets

Vulnerable-Code-Snippets 从互联网各处收集的易受攻击代码片段集合。片段来自各种博客文章、书籍、资源等。无意侵犯版权 注意：这不是测试静态分析工具的好基准，它们是残缺的代码片段，缺少导入语句和缺失文件。...

CVE_ADC_IOC_2026

CVEADCIOC2026 NetScaler CVE 前置条件检查器 作者: Derek 一个 Python 脚本，用于检查 NetScaler 配置文件（ns.conf），确定设备是否满足特定 CVE 的前置条件。该脚本解析运行配置或已保存的配置文件，并报告存在漏洞的配置及详细发现。 支持的 CVE CVE| 描述| 检查的前置条件 ---|---|--- CVE-2026-8451| SAML IdP 配置文件| add authentication samlIdPProfile . CVE-2026-8452| 认证/网关虚拟服务器| add authentication...