changeme

changeme デフォルト認証情報スキャナー。 概要 changeme は商用スキャナーが終わったところから引き継ぎます。デフォルト認証情報やバックドア認証情報の検出に重点を置いており、必ずしも一般的な認証情報を対象とするわけではありません。デフォルトモードではHTTPのデフォルト認証情報をスキャンしますが、他の認証情報もサポートしています。 changeme はコードやモジュールを記述することなく新しい認証情報を簡単に追加できるように設計されています。認証情報データはコードから分離されて保存されます。すべての認証情報は yaml ファイルに保存されるため、人間が容易に読み取れると同時...

CVE-2021-44228

CVE-2021-44228 VMware View Horizon のバックドア検出 オプションの送信機能付きカナリアが含まれています。自己責任で使用してください。 これは Windows 上の VMware Horizon 接続サーバーで実行するように設計されています。 UAG アプライアンス（Photon Linux）は対象外です。...

RCLocals

RCLocals Sysinternals의 'Autoruns'에서 영감을 받은 RCLocals는 모든 Linux 시작 가능성을 분석하여 백도어를 찾고, 프로세스 무결성 검증, DLL 주입된 프로세스 스캔 등을 수행합니다. 포함된 항목: ·시스템이 신뢰하는 GPG 키 목록 ·설치된 패키지 ·파일 무결성 ·프로세스 무결성 어떤 설치된 패키지에도 속하지 않는 프로세스 및 프로세스에 로드된 라이브러리 ·이름이 스푸핑된 프로세스 prctl을 사용하여 /bin/ps에서 이름을 변경하는 프로세스 ·CRON 항목 ·RC 파일 ·X 시스템 시작...

sticky_keys_hunter

Sticky Keys Hunter Questo script bash POC testa per backdoor di tasti permanenti e utilman. Lo script si collegherà a un server RDP, invierà entrambi i trigger di tasti permanenti e utilman e catturerà lo schermo del risultato. Questo script è stato scritto per dimostrare una teoria che avevo su...

vscan

vscan strumento di scansione delle vulnerabilità che utilizza nmap e script nse per trovare vulnerabilità Questo strumento aggiunge ulteriore valore alla scansione delle vulnerabilità con nmap. Utilizza script NSE che possono aggiungere flessibilità in termini di rilevamento e sfruttamento delle...

psad

psad - Rilevamento di Intrusioni con i Log di iptables Introduzione Il Port Scan Attack Detector psad è un demone di sistema leggero scritto in è progettato per funzionare con il codice di firewall Linux iptables/ip6tables/firewalld per rilevare traffico sospetto come scansioni e sweeps di porte,...

TNC-Defense

TNC-Defense TNC-Defense fornisce codice di ricerca per rilevare e bonificare le backdoor nei modelli di diffusione text-to-image. Il repository attualmente include pipeline di rilevamento per Stable Diffusion v1.4, Stable Diffusion v1.5, Stable Diffusion XL e Stable Diffusion 3 Medium, insieme a...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck Dieses Skript prüft den Citrix NetScaler, ob er durch CVE-2019-19781-Angriffe kompromittiert wurde, und sammelt alle Dateisysteminformationen. Die folgenden Dateien und Protokolle werden überprüft neueste Version 1.13: Vorlagenordner für XML-Dateien Apache...

modelaudit

ModelAudit Proteggi i tuoi modelli AI prima della distribuzione. Scanner statico che rileva codice malevolo, potenziali indicatori di backdoor e vulnerabilità di sicurezza nei file di modelli ML — senza mai caricarli o eseguirli. Documentazione completa | Esempi di utilizzo |...

CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP Via OOD Trigger Inversion

Organisations with limited data and computational resources increasingly outsource model training to Machine Learning as a Service MLaaS providers, who adapt vision-language models VLMs such as CLIP to downstream tasks via prompt tuning rather than training from scratch. This semi-honest setting...

Detecting backdoored language models at scale

Today, we are releasing new research on detecting backdoors in open-weight language models. Our research highlights several key properties of language model backdoors, laying the groundwork for a practical scanner designed to detect backdoored models at scale and improve overall trust in AI...

Detecting backdoored language models at scale

Today, we are releasing new research on detecting backdoors in open-weight language models. Our research highlights several key properties of language model backdoors, laying the groundwork for a practical scanner designed to detect backdoored models at scale and improve overall trust in AI...

LoRA As Oracle

Backdoored and privacy-leaking deep neural networks pose a serious threat to the deployment of machine learning systems in security-critical settings. Existing defenses for backdoor detection and membership inference typically require access to clean reference models, extensive retraining, or...

Cross-LLM Generalization of Behavioral Backdoor Detection in AI Agent Supply Chains

As AI agents become integral to enterprise workflows, their reliance on shared tool libraries and pre-trained components creates significant supply chain vulnerabilities. While previous work has demonstrated behavioral backdoor detection within individual LLM architectures, the critical question ...

PoTS: Proof-Of-Training-Steps for Backdoor Detection in Large Language Models

As Large Language Models LLMs gain traction across critical domains, ensuring secure and trustworthy training processes has become a major concern. Backdoor attacks, where malicious actors inject hidden triggers into training data, are particularly insidious and difficult to detect. Existing...

Binary Diff Summarization Using Large Language Models

Security of software supply chains is necessary to ensure that software updates do not contain maliciously injected code or introduce vulnerabilities that may compromise the integrity of critical infrastructure. Verifying the integrity of software updates involves binary differential analysis...

Coward: toward Practical Proactive Federated Backdoor Defense Via Collision-Based Watermark

Backdoor detection is currently the mainstream defense against backdoor attacks in federated learning FL, where malicious clients upload poisoned updates that compromise the global model and undermine the reliability of FL deployments. Existing backdoor detection techniques fall into two...

DUP: Detection-Guided Unlearning for Backdoor Purification in Language Models

As backdoor attacks become more stealthy and robust, they reveal critical weaknesses in current defense strategies: detection methods often rely on coarse-grained feature statistics, and purification methods typically require full retraining or additional clean models. To address these challenges...

Exploit for Improper Access Control in Elasticsearch

欢迎各位大佬提BUG,当前版本 AssetScanV1.3 周期 初版：2019年11月28日 V1.0初版编写完成 修改1：2019年12月02日 感谢Shadow·J反馈kali下文件导入异常 修改2：2019年12月03日 V1.1发布，新增ARP存活检测（回滚，测bug） 修改3：2019年12月04日 V1.2发布，修复漏洞脚本异常，修复weblogic脚本 修改4：2019年12月05日 V1.2修改，感谢sevck提供设计思路以及代码不规范问题 修改5：2019年12月05日 V1.2修改，修复IP数据处理异常 修改6：2019年12月19日...

SerComm Network Device Backdoor Detection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SerComm Network Device Backdoor Detection', 'Description' = %q This module can identify SerComm manufactured network devices which contain a...