KLAIOS

🛡️ KLAIOS – システムマニュアル v6.0 名称: KLAIOS Kali Linux AI Operations System バージョン: 6.0 Red Team Edition ステータス: 運用中 / 武装済 1. KLAIOSとは？ KLAIOSはハイブリッドセキュリティ環境です。Kali Linux の攻撃力、VPNバンカー の安全性、そして最新のAI の知能を組み合わせています。 これは単なるツールではなく、ホストシステムから物理的に分離されているものの、ローカルおよび外部のターゲットにアクセスできる「コンテナ内のラボ」です。 アーキテクチャ コンテナ1 VPN:...

CyberSec2026

Instalación de la víctima Inicia tu VM en VirtualBox 1. Inicia sesión con: usuario: osboxes contraseña: osboxes.org 2. Abre una terminal 3. Comprueba si tienes una conexión a internet activa. ping 8.8.8.8 Si tu ping no tiene éxito, comprueba si tu interfaz NAT está activada. 4. Actualiza tu siste...

network-security-snort

Snort IDS/IPS 部署实验 在 Kali Linux 上的三虚拟机网络中，对 Snort 3 进行了全流程部署，既作为入侵检测系统（被动监控），也作为入侵防御系统（通过 iptables 主动阻断），并针对四种攻击向量完成了验证。 本实验通过将同一套四向量攻击链运行两次，证明了检测 与防护 之间的运维性区别——第一次针对只能记录日志但无法阻断的 IDS，第二次针对 IDS + iptables IPS 层，后者有选择地丢弃攻击流量，同时保留合法流量。 目录 实验环境 网络拓扑 方法论 Snort 配置 自定义检测规则 阶段 1 — IDS 模式 阶段 2 — IPS 模式 ID...

KaliBench: A Fine-Grained Benchmark for Cybersecurity Tool Use on Kali Linux with Runtime-Free Verifiable Rewards

LLMs are increasingly applied to cybersecurity workflows, where they are expected to translate analysts' intent into tool invocations. However, existing evaluations focus on knowledge-based assessments or end-to-end agentic tasks, and do not directly measure LLMs' ability to generate executable...

CVE-2021-4773

CVE-2021-4773 これは、仮想マシンを使用して脆弱性CVE-2021-4773を悪用する方法の練習例です。 このチュートリアルには以下が必要です。 Kali Linux の仮想マシン Ubuntu Server の仮想マシン Apache バージョン 2.4.49 のインストール それでは始めましょう。 2台の仮想マシンが実行されている状態で、アーカイブリポジトリからApacheバージョン2.4.49をインストールします。 このバージョンは以下で入手できます。 https://archive.apache.org/dist/httpd/CHANGES2.4.49...

kali-preseed-examples

Kali Preseed 示例 Debian preseed 文件是用于自动化安装和配置基于 Debian 的发行版的有用工具。Kali 可以利用这些文件，通过无人值守、定制化、一致性的安装来加速安装过程。有关 preseed 文件的更多信息，请参阅 Debian 安装指南 或 Debian preseed 示例文本文件。 虽然定制 preseed 文件的方法有很多，已安装的软件包还能提供更多选项，但本仓库将用于托管并允许创建更简单的文件，这些文件允许对 Kali 安装选项进行轻度定制。 使用 Preseed 文件 关于使用 preseed 文件的非常深入且有帮助的指南，我们可以参考...

GHSA-G5F9-3XFG-P9MF Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Summary Decepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

CVE-2026-61732

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

EUVD-2026-86329

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

CVE-2026-61732

Versions prior to 1.1.17 of Decepticon , an autonomous hacking agent, are vulnerable to a role-boundary forgery because they fail to neutralize ChatML special-token literals when wrapping web crawl results into LLM messages. When using the BYOK deployment model with common providers (such as vLLM...

CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

PT-2026-98193

Name of the Vulnerable Software and Affected Versions Decepticon versions prior to 1.1.17 Description Decepticon fails to neutralize ChatML special-token literals when wrapping web crawl results and other tool outputs into LLM messages. In Bring Your Own Key BYOK deployments using OpenAI-compatib...

CVE-2026-61732: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

Cybersecurity-Home-Lab-Project-Documentation

Cybersecurity Home Lab — Project Documentation Author: Ga...

fluxion v6.32

Fluxion is the future of MITM WPA attacks Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social...

ShadowNet v11.1.0

Big Thanks to Jesus for making this gain attention! Turn to Jesus before it's too late. : He loves You To even further enhance your privacy and security; Use ShadowNet on your Host OS & Run Whonix in a VM to browse the web. Or you can use GhostBox. Sandboxing tool released by Anti Surveillance...

Project-01-Cybersecurity-Home-Lab

Project 1 — Cybersecurity Home Lab Project Overview This...

violin v3.2.1

Violin ☤ — Supervised Agentic Hermes Pentest Profile 35 playbooks · 19 references · 14 templates · required execution guard · Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests — from reconnaissance through safe exploit validation to...