Guardrails

Biblioteca NVIDIA NeMo Guardrails...

Live-Forensicator

🛡️ Forensicator 🛡️ Cross-platform Incident Response & Live Forensics Toolkit Windows PowerShell | Linux Bash | macOS Shell Built for fast, structured, and actionable forensic investigations. 🤔 About Forensicator is a cross-platform incident response and live forensics toolkit. It is designed to...

ghostsplice

GhostSplice: fragmentación de confianza entre canales PoC de ataque Código de prueba de concepto para GhostSplice , un ataque del ASSET Research Group. El artículo completo está en "La IA se negó a robar los secretos. Así que le dimos un formulario.". La idea en palabras sencillas Los asistentes ...

BootHole

BootHole Información general Este repositorio fue creado para contener scripts útiles relevantes y cualquier herramienta o información adicional que pueda ayudar a otros en la gestión de sus planes de mitigación de la vulnerabilidad BootHole. Plataformas basadas en Windows Hemos creado un script ...

mubeng

An incredibly fast proxy checker & IP rotator with ease. Contributing • What's new • Documentation • Report Issues Features Why mubeng? Installation Binary Docker Source Usage Basic Options Notes Install SSL Certificate Examples Proxy checker Proxy IP rotator Burp Suite Upstream Proxy OWASP ZAP...

MalwareSourceCode

gestionado por vx-underground | síguenos en Twitter | descarga muestras de malware en la página VXUG/samples Descargo de responsabilidad: En la máxima medida permitida por la ley aplicable, vx-underground y/o los afiliados que hayan enviado contenido a vx-underground no serán responsables de ning...

envsec

envsec Secure environment secrets management using native OS credential stores. Demo Features Store secrets in your OS native credential store not plain text files Cross-platform: macOS, Linux, Windows Organize secrets by context e.g. myapp.dev, stripe-api.prod, work.staging Track secret metadata...

Threat-Remediation-Scripts

Introducción Desde 2021, he desarrollado varios scripts para ayudarme en mis investigaciones y esfuerzos de remediación. Pensé: ¿por qué no compartirlos con el público, con la esperanza de que te ayuden? ¿Cómo funcionan estos scripts? Los scripts que desarrollé están diseñados para funcionar con...

Azure-APIM-Cross-Tenant-Signup-Bypass

Bypass de registro entre inquilinos de Azure APIM Estado 01.12.2025: Esta vulnerabilidad sigue activa y explotable. Microsoft no ha corregido este problema y lo considera «por diseño». Aviso de seguridad GHSA-vcwf-73jp-r7mv CVE-2025-66390 Resumen Una vulnerabilidad de seguridad en el portal para...

CVE-2017-10366_peoplesoft

CVE-2017-10366: Exploit de deserialización Java de Oracle PeopleSoft 8.54, 8.55, 8.56 Este script automatiza la explotación de una vulnerabilidad de deserialización Java en Oracle PeopleSoft, descubierta originalmente por Vahagn Vardanyan. Este exploit requiere ysoserial.jar para generar payloads...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...

fawkes

Fawkes Mythic C2 Agent Fawkes is an entirely vibe-coded Mythic C2 agent. It started as an "I wonder" and has turned into a goal. My goal is to not write a single line of code for this agent, instead, exclusively producing it at a prompt. I originally attempted to write the agent myself, but after...

CVE-2024-4367-Analysis

CVE-2024-4367: Ejecución Arbitraria de JavaScript en PDF.js Descripción general CVE-2024-4367 es una vulnerabilidad crítica en la librería PDF.js que permite la ejecución arbitraria de JavaScript en el navegador del usuario, lo que conduce a ataques de Cross-Site Scripting XSS. Esto afecta a...

secret-stripper

A small Rust CLI that strips secrets from your clipboard on demand. Bind a hotkey, highlight text, press the chord - the clipboard holds a redacted version. Normal Ctrl+C / Ctrl+V is never intercepted. Contents Quick Start Supported OS Platform setup macOS setup Windows setup What It Detects Reda...

litebox

LiteBox A security-focused library OS !NOTE This project is currently actively evolving and improving. While we are working toward a stable release, some APIs and interfaces may change as the design continues to mature. You are welcome to explore and experiment, but if you need long-term stabilit...

CVE-2022-28077

CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Título del Exploit: Home Owners Collection Management System 1.0 - Reflected XSS Fecha: 2022-05-06 CVE: CVE-2022-28077 Autor del Exploit: Abdulaziz Saad @b4zb0z Página del proveedor: https://www.sourcecodester.com/ Enlace...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

GHSA-GVF2-2RH5-MPGF OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

Summary A user who can save a telemetry screen permission systemset can embed JavaScript in a screen BUTTON widget. The BUTTON widget evals the stored button text in the browser when the button is activated, and screens are shared content rendered to other users in the scope. As a result, an...

OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

Summary A user who can save a telemetry screen permission systemset can embed JavaScript in a screen BUTTON widget. The BUTTON widget evals the stored button text in the browser when the button is activated, and screens are shared content rendered to other users in the scope. As a result, an...

brook

Brook A cross-platform programmable network tool. Sponsor : Shiliew - Focuses on providing stable network services Server root@kitploit: bash You may want to use brook link to customize some parameters Docs https://www.txthinking.com/brook.html Brook Script Gallery https://brook.app...