475 matches found
CVE-2025-38678
creationtimestamp| type| source ---|---|--- 2025-11-24 15:00:07+00:00| published-proof-of-concept| Telegram/5Go4y9Sp59a8HRsoMaTj0X-e6nFTkvRgJdqk6vUB2AgWKv0 2025-11-27 07:58:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60913...
Hiding in the AI Traffic: Abusing MCP for LLM-Powered Agentic Red Teaming
Generative AI is reshaping offensive cybersecurity by enabling autonomous red team agents that can plan, execute, and adapt during penetration tests. However, existing approaches face trade-offs between generality and specialization, and practical deployments reveal challenges such as...
CVE-2025-61299
creationtimestamp| type| source ---|---|--- 2025-11-07 05:43:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58649 2025-11-07 09:00:04+00:00| published-proof-of-concept| Telegram/rxBXc7mJGGU5sBhvwkQkmojEU4Xu3I8--yJupvnllAH1D4...
CVE-2025-63588
creationtimestamp| type| source ---|---|--- 2025-11-05 13:49:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58421...
autottp
This is a Python wrapper for the PowerShell Empire API, a framework for penetration testing and red teaming. The wrapper provides a simple interface to interact with the Empire API, allowing users to automate tasks and sequences of actions. The wrapper is feature complete as of Empire 1.5.0 and...
kiro-redteam-lite
kiro-redteam-lite Red Team Automation Lite: Focused on...
Risk Psychology and Cyber-Attack Tactics
We examine whether measured cognitive processes predict cyber-attack behavior. We analyzed data that included psychometric scale responses and labeled attack behaviors from cybersecurity professionals who conducted red-team operations against a simulated enterprise network. We employed multilevel...
Hexstrike-redteam
HexStrike AI RED-TEAM AI-Powered MCP Cybersecurity Automat...
pentest-automation-suite
Penetration Testing Automation Tools 🔴 Automated Penetratio...
SafeSearch: Automated Red-Teaming for the Safety of LLM-Based Search Agents
Search agents connect LLMs to the Internet, enabling access to broader and more up-to-date information. However, unreliable search results may also pose safety threats to end users, establishing a new threat surface. In this work, we conduct two in-the-wild experiments to demonstrate both the...
EvoMail: Self-Evolving Cognitive Agents for Adaptive Spam and Phishing Email Defense
Modern email spam and phishing attacks have evolved far beyond keyword blacklists or simple heuristics. Adversaries now craft multi-modal campaigns that combine natural-language text with obfuscated URLs, forged headers, and malicious attachments, adapting their strategies within days to bypass...
RedTeam-Tactics-and-Techniques
Red Teaming Tactics and Techniques...
CVE-2025-59377
creationtimestamp| type| source ---|---|--- 2025-09-15 13:18:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51708...
redteam-notebook
It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...
redteam-research
Collection of PoC and offensive techniques used by the BlackArrow Red Team...
GHSA-J4H9-WV2M-WRF7 Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
At startup, Claude Code constructed a shell command that interpolated the value of git config user.email from the current workspace. If an attacker controlled the repository’s Git config e.g., via a malicious .git/config and set user.email to a crafted payload, the unescaped interpolation could...
Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email
At startup, Claude Code constructed a shell command that interpolated the value of git config user.email from the current workspace. If an attacker controlled the repository’s Git config e.g., via a malicious .git/config and set user.email to a crafted payload, the unescaped interpolation could...
GHSA-QXFV-FCPC-W36X Claude Code rg vulnerability does not protect against approval prompt bypass
Due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on standard Claude Code auto-update will...
Red Teaming Methodology for Design Obfuscation
The main goal of design obfuscation schemes is to protect sensitive design details from untrusted parties in the VLSI supply chain, including but not limited to off-shore foundries and untrusted end users. In this work, we provide a systematic red teaming approach to evaluate the security of desi...