975 matches found
ai-reverse-engineering
Rev·Deck — AI-Assisted Reverse Engineering with Ghidra Rev·Deck is a local, single-user static-analysis workstation. It pairs an evidence-first web UI with an LLM copilot over a binary analyzed by a headless Ghidra service: browse deterministic evidence functions, strings, imports,...
cve-2025-32711
CVE-2025-32711 EchoLeak Detection Tool 🔐 Overview CVE-2025-32711, nicknamed "EchoLeak," is a critical zero-click vulnerability in Microsoft 365 Copilot that allowed attackers to exfiltrate sensitive organizational data without any user interaction. This repository contains detection and remediati...
ghidra-copilot
Ghidra Copilot AI-assisted companion for Ghidra. It embeds a chat panel that can answer questions about your current program, suggest next steps, and run small analysis tools directly from the conversation. What It Does Chat inside Ghidra that stays in context with the open program. Tool calls fo...
Vidar-Stealer-Reverse-Engineering
Vidar Stealer 2.0 Reverse Engineering Analysis Overview This analysis covers an in-depth reverse engineering of Vidar Stealer 2.0 , a sophisticated information stealer that uses advanced evasion techniques to remain undetected. Key findings include: Task Scheduler Tampering: Modifies system task...
roninforge-angularjs-migration
roninforge-angularjs-migration Source-of-truth repo for the AngularJS to Angular 18 GitHub Copilot instructions package shipped to github/awesome-copilot at instructions/angularjs-to-angular-18.instructions.md. First in a planned series of enterprise-targeted Copilot products from RoninForge...
AI-Red-Teaming-Playground-Labs
AI Red Teaming Playground Labs This repository contains the challenges for the labs used in the course "AI Red Teaming in Practice". The course was originally taught at Black Hat USA 2024 by Dr. Amanda Minnich and Gary Lopez. Martin Pouliot handled the infrastructure and scoring for the challenge...
power-pwn
Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...
CVE-2025-4162025
Security Advisory: CVE-2025-4162025 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...
CVE-2025-4172025
Security Advisory: CVE-2025-4172025 This security summary was provided by CoPilot ^1^. The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be...
CVE-2025-4162028
Security Advisory: CVE-2025-4162028 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...
CVE-2025-4162027
Security Advisory: CVE-2025-4162027 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...
CVE-2025-4102025
Security Advisory: CVE-2025-4102025 Summary A critical vulnerability has been discovered in Copilot AI affecting how web query citation links are rendered after Retrieval-Augmented Generation RAG operations. When users request page summaries or perform web-based queries, all subsequent citation...
4062-1
Black Duck CoPilot Gradle/Travis CI Example Shows a working setup for using the Black Duck CoPilot integration to analyze the risk of project dependencies Travis CI Setup The .travis.yml file has been modified to upload generated dependency data to Black Duck CoPilot: root@kitploit: aftersuccess:...
pentest-copilot
Pentest Copilot 一个开源的、AI 驱动的渗透测试代理。连接到 Kali 攻击机，自主运行工具，分析结果，并迭代执行。你只需描述目标，其余的交由它完成。 专为真实项目、boot2root 靶机和 CTF 打造。 实际运行 Pentest Copilot 在 OWASP Juice Shop 中执行认证绕过：...
EUVD-2026-82600
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network...
EUVD-2026-82582
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
EUVD-2026-82588
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
CVE-2026-85887
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network...