personal-security-checklist

Personal Security Checklist The ultimate list of tips to secure your digital life 🌐digital-defense.io 👉 Read the Checklist 👈 Contents The Checklist The Website The API Contributing Credits License The Checklist You can read the full checklist in CHECKLIST.md. To view/edit the raw data, see...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

vulnerable-mcp-servers-lab

Vulnerable MCP Servers Lab This repository contains intentionally vulnerable implementations of Model Context Protocol MCP servers both local and remote. Each server lives in its own folder and includes a dedicated README.md with full details on what it does , how to run it , and how to...

kong

Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

tesla-security-research

Tesla Security Research Vulnerability research on the Tesla Model 3/Y infotainment system Intel Atom MCU, Linux 4.14.235, responsibly disclosed to Tesla via Bugcrowd. Obtained persistent root access on a production Tesla Model 3 through a command injection vulnerability in Tesla's ODIN diagnostic...

vger

V'ger V'ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer , you've found Jupyter credentials, but don't know what you can do with them. V'ger is organized in a format that...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

CVE-2023-1177

CVE-2023-1177 | | MLFlow Path Traversal | Tested on MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

CVE-2024-37054-PoC

Description Proof of concept for CVE-2024-37054, a critical deserialization vulnerability in MLflow versions 0.9.0 to 2.14.1. When a malicious pyfunc model is loaded via mlflow.pyfunc.loadmodel, the pickled payload executes arbitrary code. Files exploit.py — full exploit: register, train, upload,...

oss-fuzz-gen

A Framework for Fuzz Target Generation and Evaluation This framework generates fuzz targets for real-world C/C++/Java/Python projects with various Large Language Models LLM and benchmarks them via the OSS-Fuzz platform. More details available in AI-Powered Fuzzing: Breaking the Bug Hunting Barrie...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

JoySafety

JoySafety — Large Model Security Framework 📋 Table of Contents Project Introduction ✨ Features 🚀 Quick Start 📖 User Guide 🏆 Best Practices 🏗️ Architecture Design 🛠️ Development 📄 License 📅 Roadmap Star History new release ✅ Prompt injection detection model fully upgraded : Training system...

hermes-agent

Hermes Agent ☤ Hermes Agent | Hermes Desktop...

mcp-attack-detection-sentinel

Detección de ataques MCP — Laboratorio de investigación de Sentinel Investigación de detección de Sentinel para patrones de ataque de MCP Protocolo de Contexto de Modelo : acceso de identidad inusual tras un evento relacionado con MCP, mutación de la definición de herramientas, acceso entre...

privacy-parser

OpenAI Privacy Parser OpenAI shipped Privacy Filter — a model that hides PII in text. Defenders use it so data doesn't leak. But every defense has a second side. Attackers need PII too. From logs, dumps, abandoned S3 buckets, stolen inboxes. Same task: find everything personal in a pile of text...

Purdue-Model-for-Industrial-Control-System-Environments

Purdue Model for Industrial Control System ICS Environments Turkish This research paper has already been published before and you can also find the original .pdf version at here...

choronzon

Choronzon - An evolutionary knowledge-based fuzzer Introduction This document aims to explain in brief the theory behind Choronzon. Moreover, it provides details about its internals and how one can extend Choronzon to meet new requirements. An overview of the architecture of Choronzon was initial...

www-project-top-10-for-large-language-model-applications

www-project-top-10-for-large-language-model-applications OWASP Foundation Web Repository OWASP Top 10 for Large Language Model Applications...

ai-kill-chain

Extended Cyber Kill Chain for AI-Era Threats An update to the Lockheed Martin Cyber Kill Chain for defenders working against LLM and agentic AI attacks. Adds a pre-attack stage for model supply chain compromise. Adds AI-specific sub-techniques to each of the original seven stages. Splits the...