ida-pro-mcp

IDA Pro MCP !IMPORTANT 대신공식 Hex-Rays IDA MCP 서버를 사용하는 것을 권장합니다! 자세한 내용은 발표 블로그 글을 참고하세요. IDA Pro에서 바이브 리버싱을 가능하게 해주는 간단한 MCP 서버입니다. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 영상에 사용된 바이너리와 프롬프트는 mcp-reversing-dataset 저장소에서 확인할 수 있습니다. 사전 요구 사항 Python 3.11 이상...

deep-pwning

Deep-pwning — это легковесный фреймворк для экспериментов с моделями машинного обучения с целью оценки их устойчивости против мотивированного противника. Обратите внимание, что deep-pwning в его текущем состоянии далеко от зрелости или завершения. Он предназначен для того, чтобы вы могли с ним...

vulnerable-mcp-servers-lab

취약한 MCP 서버 랩 이 저장소는 의도적으로 취약하게 만든 Model Context Protocol MCP 서버로컬 및 원격 구현을 포함합니다. 각 서버는 자체 폴더에 있으며 기능 , 실행 방법 , 취약점 시연/공격 방법 에 대한 자세한 내용이 포함된 전용 README.md 파일을 제공합니다. 통제된 랩 환경 외부에서 실행하지 마십시오. 이 저장소의 용도 일반적인 MCP 서버 및 도구 통합 실패 모드에 대한 보안 교육/연구. 취약한 MCP 서버가 데이터 노출, 명령어 삽입, 공급망 손상, 코드 실행으로 이어질 수 있는 방법에...

reave

REAVE Reave es un framework de post-explotación diseñado para puntos finales de hipervisores, escrito en Python. Actualmente se encuentra en desarrollo. Reave sigue un modelo tradicional de listener/agente, donde el usuario puede configurar múltiples listeners que aceptan cualquier número de...

Lepus

Lepus Lepus es una herramienta para enumerar subdominios, verificar la posibilidad de toma de control de subdominios y realizar escaneos de puertos. ¡Y vaya que es rápida! Uso básico lepus.py yahoo.com Resumen Modos de enumeración Toma de control de subdominios Escaneo de puertos Instalación...

OSSEM

Metadatos de Eventos de Seguridad de Código Abierto OSSEM Un proyecto liderado por la comunidad centrado principalmente en la documentación, estandarización y modelado de registros de eventos de seguridad. https://ossemproject.com/intro.html Objetivos Definir y compartir un modelo de datos común...

CVE-2024-39722

Ollama CVE-2024-39722 Exploit Tool This tool is designed to exploit CVE-2024-39722, a model existence disclosure vulnerability in Ollama versions up to and including 0.1.45. It allows users to check if an Ollama server is vulnerable and attempt to discover existing models on the server...

privacy-filter

OpenAI Privacy Filter OpenAI Privacy Filter is a bidirectional token-classification model for personally identifiable information PII detection and masking in text. It is intended for high-throughput data sanitization workflows where teams need a model that they can run on-premises that is fast,...

CVE-2024-3660-PoC

CVE-2024-3660 – TensorFlow Keras Arbitrary Code Execution via Malicious Model Overview CVE-2024-3660 is an arbitrary code execution vulnerability in TensorFlow's Keras framework affecting versions \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

ai-kill-chain

Extended Cyber Kill Chain for AI-Era Threats An update to the Lockheed Martin Cyber Kill Chain for defenders working against LLM and agentic AI attacks. Adds a pre-attack stage for model supply chain compromise. Adds AI-specific sub-techniques to each of the original seven stages. Splits the...

mcp-security-checklist

🔐 Lista de verificación de seguridad de MCP Una lista de verificación de seguridad práctica y mantenida por la comunidad para equipos que construyen y despliegan servidores Model Context Protocol MCP e infraestructura de agentes de IA. Por qué existe esto MCP se está adoptando rápidamente. La guí...

FIASSE

A Framework for Integrating Application Security into Software Engineering FIASSE Note: This repository is an ongoing work. Contributions are welcome! Overview TL;DR: please read the DOC. Explore FIASSE website. Visit GitHub Discussions to contribute. This repository contains resources and...

avpass

AVPASS AVPASS es una herramienta para filtrar el modelo de detección de sistemas de detección de malware Android es decir, software antivirus y eludir sus lógicas de detección utilizando la información filtrada junto con técnicas de ofuscación de APK. AVPASS no se limita a las características de...

hcon2026hwctf

Hardware Hacking CTF hcon2026hwctf 하드웨어 CTF에 관심이 있다면, RISC-V RP2350 익스플로잇 챌린지로우 레벨를 다루는 HC0N CTF 2026의 첫 번째 공개 챌린지가 여기 있습니다. 우리는 이 챌린지를 너무 엘리트적이거나 어렵지 않게 만들려고 노력했습니다. 수백 명의 컨퍼런스 참가자들이 문제를 풀 기회를 가질 수 있도록요. 그 목표를 달성했기를 바랍니다. CTF를 집에서 실행하고 싶다면 Raspberry Pi Pico 2 를 하나 준비해서 이 펌웨어를 플래시하고, 라이트업은 읽지 마세요...

CVE-2026-103534

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

deleting-the-trace

Control-token injection attacks on tool-using agents Code and logged measurements for a study of two input-level attacks on tool-using language model agents. The first attack appends a short string of a model's own channel-control tokens to untrusted input; the tokenizer reads it as an...

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

EUVD-2026-90467

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

CVE-2026-103534

The David-Crty databasement software (versions up to 1.7.1 ) contains a vulnerability in the Snapshot Model component. Specifically, the SnapshotPolicy.viewAny/SnapshotPolicy.view functions within the /api/v1/snapshots file suffer from improper access controls . This flaw allows for remote exploi...