Facad1ng

If you find this GitHub repo useful, please consider giving it a star! ⭐️ Facad1ng is an open-source URL masking and analysis tool designed for security research, phishing awareness, and defensive testing. It demonstrates how adversaries may disguise malicious links using URL manipulation and...

flareprox

FlareProx 🔥 Simple IP Rotation & URL Redirection via Cloudflare Workers FlareProx automatically deploys HTTP proxy endpoints on Cloudflare Workers for easy redirection of all traffic to any URL you specify. It supports all HTTP methods GET, POST, PUT, DELETE, etc. and provides IP masking through...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

sig_finder

SigFinder Allows to find binary signatures with wildcards in a given buffer. The wildcard is defined by ? and can be used to mask one nibble. Examples of valid signatures: 23 56 12 68 55 0? 34 12 40 ?? 4? 8? e? The list of signatures can be supplied as a file in SIG format: Example: ASProtect v1....

pisiguard

PISIGuard Protect your personal and sensitive info when you chat with AI PISIGuard : P ersonally I dentifiable & S ensitive I nformation Guard PISIGuard demo. sensitive data is caught, masked and restored right in the browser I built PISIGuard because I've been horrified at how much personal &...

CallStackMasker

CallStackMasker This repository demonstrates a PoC technique for dynamically spoofing call stacks using timers. Prior to our implant sleeping, we can queue up timers to overwrite its call stack with a fake one and then restore the original before resuming execution. Hence, in the same way we can...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

cloudgpt

CloudGPT AWS vulnerability scanner Scan customer managed AWS policies for vulnerabilities using ChatGPT. This tool automatically redacts the customer account number by replacing them with a randomly generated account number before sending the policies to ChatGPT. Knowledge of a vulnerable policy...

CVE-2026-115415 Secret masking bypass in the environment tool in Strands Agents Tools

Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's...

CVE-2026-115415

The Strands Agents Tools software, in versions prior to 0.8.6 , contains an improper neutralization of input used for LLM prompting within the environment tool . This vulnerability allows remote actors to bypass the tool's secret masking functionality using a crafted prompt. Successful exploitati...

CVE-2026-105620

PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105619

PostgreSQL Anonymizer doesn't mask data accessed thru a securityinvoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105618

PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to the paritions / inheritance tables is masked but not thru the parent table. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

EUVD-2026-112296

PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pgstats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL...

CVE-2026-110183 PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking

PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pgstats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL...

EUVD-2026-112292

PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

EUVD-2026-112291

PostgreSQL Anonymizer doesn't mask data accessed thru a securityinvoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

EUVD-2026-112290

PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to the paritions / inheritance tables is masked but not thru the parent table. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105619 PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views

PostgreSQL Anonymizer doesn't mask data accessed thru a securityinvoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105619

The PostgreSQL Anonymizer extension fails to apply data masking rules when data is accessed through a security_invoker view . This vulnerability allows sensitive data to remain unmasked, potentially leading to unauthorized information disclosure. The issue is addressed in PostgreSQL Anonymizer ve...