AutoTTP

AutoTTP 自动化战术、技术与程序（Automated Tactics Techniques & Procedures）。对于回归测试、产品评估、为研究人员生成数据等用途，重复手动执行复杂序列可能会很繁琐。我尝试了使用像 Visual Studio Code（或类似）的 IDE 来更轻松地编写 Empire（或任何提供 API 的框架/产品/工具包，如 Metasploit RPC、Cobalt-Strike 等）的脚本。于是我开始设计 AutoTTP。这仍然是一个进行中的工作。 使用 Empire 2.2 测试。 Youtube - 概览与精选技术深度解析 什么是 TTP？...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

V8Harvest

V8Harvest V8Harvest 帮助在单个页面上查看最近的 V8 漏洞模式，用于分析 V8 漏洞。 它已使用 git log 解析了 src/v8/test/mjsunit/ 目录下的所有 regress- 文件。 每个 regress 包含与其自身信息相关的以下链接： Chromium Bugs / V8 Bugs V8 Git Chromium Code Search Chromium Code Review...

ftw

用于测试WAF的框架（FTW） 目的 本项目由ModSecurity和Fastly的研究人员共同创建，旨在为WAF规则提供严格的测试。它使用OWASP核心规则集V3作为基线，在WAF上测试规则。规则集中的每条规则都被加载到一个YAML文件中，该文件会发出触发这些规则的HTTP请求。 目标/使用场景包括： 通过持续集成并对WAF发起可重复的攻击，发现WAF部署中的回归问题 为ModSecurity中的新规则提供测试框架，若提交规则，则必须附有对应的正向和负向测试 基于通用且可接受的基线规则集（OWASP）评估WAF 测试和验证不属于核心规则集的自定义WAF规则 安装 git clone...

CVE-2026-70802

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77799

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77797

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47291

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60966

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Turn specs into evals for any agent with ASSERT

Today, we’re releasing Adaptive Spec-driven Scoring for Evaluation and Regression Testing ASSERT, an open-source framework for turning natural-language behavior specifications into executable evaluations. Every team building an AI system starts with a clear intention for the behaviors they want t...

Beyond Fixed and Dynamic Prompts: Embedded Jailbreak Templates for Advancing LLM Security

As the use of large language models LLMs continues to expand, ensuring their safety and robustness has become a critical challenge. In particular, jailbreak attacks that bypass built-in safety mechanisms are increasingly recognized as a tangible threat across industries, driving the need for...

autottp

This is a Python wrapper for the PowerShell Empire API, a framework for penetration testing and red teaming. The wrapper provides a simple interface to interact with the Empire API, allowing users to automate tasks and sequences of actions. The wrapper is feature complete as of Empire 1.5.0 and...

CLSA-2025-1753207513 pam: Fix of CVE-2025-6020

CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing...

CLSA-2025-1753206853 pam: Fix of CVE-2025-6020

CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing...

Fedora: Security Advisory for junit (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: junit5-5.10.2-3.fc40

JUnit is a popular regression testing framework for Java platform...

SilverStripe Subsite weakens file permissions

The subsites module can weaken edit restrictions on some files and allow a malicious user to edit files they do not have edit rights to. This only affects projects with the subsites module installed. Regression testing should focus on custom file logic. Be advised that this is not a case of a use...

2022 0-day In-the-Wild Exploitation…so far

Posted by Maddie Stone, Google Project Zero This blog post is an overview of a talk, “ 0-day In-the-Wild Exploitation in 2022…so far”, that I gave at the FIRST conference in June 2022. The slides are available here. For the last three years, we’ve published annual year-in-review reports of 0-days...

DLA-2742-2 ffmpeg - regression update

Bulletin has no description...

AuthMatrix - A Burp Suite Extension That Provides A Simple Way To Test Authorization

AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services. With AuthMatrix, testers focus on thoroughly defining tables of users, roles, and requests for their specific target application upfront. These tables are structured in ...