CyberSec2026

Victim installation Start your VM in VirtualBox 1. Log in with: username: osboxes password: osboxes.org 2. Open a terminal 3. Test if you have a working internet connection. ping 8.8.8.8 If your ping is not successful, check if your NAT interface is enabled. 4. Update your OS sudo apt-get update ...

network-security-snort

Snort IDS/IPS 導入ラボ Kali Linux 上の 3 台構成の仮想ネットワークにおいて、Snort 3 を侵入検知システム（受動的モニタリング）および侵入防御システム（iptables による能動的ブロック）としてフルサイクル導入し、4 つの攻撃ベクトルに対して検証したラボです。 本ラボは、同一の 4 ベクトル攻撃チェーンを 2 回実行することで、検知 と防御 の運用上の違いを実証します。最初はログを記録するだけでブロックできない IDS に対して、次に正当なトラフィックを維持しながら攻撃を選択的に破棄する IDS + iptables IPS レイヤーに対して実行します...

KaliBench: A Fine-Grained Benchmark for Cybersecurity Tool Use on Kali Linux with Runtime-Free Verifiable Rewards

LLMs are increasingly applied to cybersecurity workflows, where they are expected to translate analysts' intent into tool invocations. However, existing evaluations focus on knowledge-based assessments or end-to-end agentic tasks, and do not directly measure LLMs' ability to generate executable...

CVE-2021-4773

CVE-2021-4773 this is a practice example of how exploit vulnerability CVE-2021-4773 with a virtual machine for this tutorial you need the next virtual machine as kali linux virtual machine as ubuntu server install apache version 2.4.49 so lets started when you have 2 virtual machines running you...

kali-preseed-examples

Kali Preseed の例 Debian preseed ファイルは、Debian ベースのディストリビューションのインストールと設定を自動化するための便利なツールです。Kali はこれらを利用して、手間のかからない、カスタマイズされた、一貫性のあるインストールを高速化できます。preseed ファイルの詳細については、Debian Installation Guide または Debian の preseed サンプルテキストファイル を参照してください。 preseed...

bLuEkEeP-GUI

bLuEkEeP-GUI CVE-2019-0708 脆弱性のテストと悪用 私はソフトウェアの悪用について責任を負いません。すべては教育目的です... bleukee-GUI は、CVE-2019-0708 の脆弱性を持つマシンをテストするためにも使えますが、 同様にハッキングすることもできます。そのため、完全に機能するコードをインストーラーなしで公開しています。また、特定のバージョン向けの悪用脆弱性デモも含まれています。 コードを少し調整し、CVE フォルダ内のさまざまなエクスプロイトを呼び出すことで強化できます。 使用要件: Kali と pip3 os, time,...

GHSA-G5F9-3XFG-P9MF Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Summary Decepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

CVE-2026-61732

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

EUVD-2026-86329

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

CVE-2026-61732

Versions prior to 1.1.17 of Decepticon , an autonomous hacking agent, are vulnerable to a role-boundary forgery because they fail to neutralize ChatML special-token literals when wrapping web crawl results into LLM messages. When using the BYOK deployment model with common providers (such as vLLM...

CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

CVE-2026-61732 Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

PT-2026-98193

Name of the Vulnerable Software and Affected Versions Decepticon versions prior to 1.1.17 Description Decepticon fails to neutralize ChatML special-token literals when wrapping web crawl results and other tool outputs into LLM messages. In Bring Your Own Key BYOK deployments using OpenAI-compatib...

CVE-2026-61732: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...

Cybersecurity-Home-Lab-Project-Documentation

Cybersecurity Home Lab — Project Documentation Author: Ga...

fluxion v6.32

Fluxion is the future of MITM WPA attacks Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social...

ShadowNet v11.1.0

Big Thanks to Jesus for making this gain attention! Turn to Jesus before it's too late. : He loves You To even further enhance your privacy and security; Use ShadowNet on your Host OS & Run Whonix in a VM to browse the web. Or you can use GhostBox. Sandboxing tool released by Anti Surveillance...

Project-01-Cybersecurity-Home-Lab

Project 1 — Cybersecurity Home Lab Project Overview This...

violin v3.2.1

Violin ☤ — Supervised Agentic Hermes Pentest Profile 35 playbooks · 19 references · 14 templates · required execution guard · Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests — from reconnaissance through safe exploit validation to...