CVE-2019-18935-checker

CVE-2019-18935-检查器...

fides

使用信息流控制保护 AI 智能体 该仓库包含一个 Jupyter notebook，用于配合学术论文《使用信息流控制保护 AI 智能体》。该 notebook 以教程形式组织，引导读者理解论文中介绍的概念。它展示了在智能体任务中确定性执行安全策略的机制的实际实现，并将概念转化为可执行的代码，供读者实验。 设置说明 该 notebook 已使用 Azure OpenAI Chat Completions API 针对 GPT-4o 和 GPT-4.1 进行了测试，但也可以轻松适配为使用 OpenAI 端点。代码通过 .env 配置文件（包含 AZUREENDPOINT、APIVERSION...

CVE-2026-24118

⚠️ 安全研究与法律免责声明 📌 本仓库的目的 本仓库严格仅用于教育、学术及经授权的网络安全研究目的 。 其旨在帮助理解以下内容： 受控环境中的安全漏洞与利用概念 沙箱隔离机制及其局限性 安全的软件设计与防御性安全实践 🚫 仅限授权使用 本仓库只能在已获得明确许可的环境中使用，例如： 个人或受控虚拟机 Docker 或隔离的实验环境 经授权的渗透测试项目 学术或网络安全培训环境 严禁在授权环境之外使用。 ⚖️ 不承担责任 / 免责声明 本仓库的作者与贡献者不承担 因使用、滥用或分发本项目及其内容而产生的任何误用、损害、损失或法律后果的责任。 使用本仓库即表示您确认：...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker 实验室 此仓库包含一个基于 Docker 的实验环境 ，用于在受控设置中探索和演示 Next.js CVE-2025-29927 漏洞。 ⚠️ 免责声明： 此实验室仅用于教育和安全研究目的。请勿将其暴露于公共互联网或用于生产环境。 📦 特性 ✅ 存在漏洞的 Next.js 应用程序 ✅ 使用 Docker 容器化 ✅ 专为本地测试 CVE-2025-29927 设计 ✅ 包含预配置的路由和 UI ✅ 易于设置和运行 🛠 先决条件 确保已安装以下软件： Docker（v20+） Git 可选：Node.js（若要在 Docker...

atomicvulns

⚠️ Intencionalmente vulnerable. Ejecutar solo localmente. Nunca exponer a internet ni a una red compartida. Lee esto en otros idiomas: Português Brasil ¿Qué es atomicvulns? Hito — v1.0: atomicvulns ahora cubre las diez categorías del OWASP Top 10 2021 A01–A10 , a través de 38 átomos. Consulta la...

CVE-2026-68820

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

log4j-2021-vulnerability-study

log4j-2021-vulnerability-study 这是一个演示如何利用 Log4J 漏洞（CVE-2021-44228）的示例。此代码可以安全运行，但请理解它的作用及其工作原理！...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

awesome-ai-security

awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...

NoiseHound

NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...

Sandb0x-Xtract0r

SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...

awesome-web3-security

awesome-web3-security A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below,...

Zeek-Intelligence-Feeds

Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...

rhabdomancer

rhabdomancer "通往可利用漏洞的道路是由不可利用的漏洞铺就的。" -- Mark Dowd Rhabdomancer 是一个极速的 IDA 无头插件，用于定位二进制文件中对潜在不安全 API 函数的调用。审计人员可以从这些候选点进行回溯，以找到允许访问不可信输入的路径。 功能特性 借助 IDA 9.x 和 idalib-rs Rust 绑定，提供极速的无头用户体验。 支持针对 IDA 所实现的任何架构编译的 C/C++ 二进制目标。 不良 API 函数调用位置会打印到标准输出，并在 IDB 中标记。 已知的不良 API 函数按危险程度分组，以帮助确定审计工作的优先级。 BAD...

pmg

Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use...

BAS-Guardian

⚠️ 仓库已归档 此仓库已归档 ，不再维护。 所有开发工作已迁移至统一的 ICS OT Protector 单体仓库： https://github.com/spinfosecurity/ics-ot-protector 该扫描器的位置 原仓库| 新位置 ---|--- Energy-Grid-Protector| scanners/energy-grid/ BAS-Guardian| scanners/bas/ Rail-OT-Protector| scanners/rail/ water-utility-protector| scanners/water/ 快速开始（BAS...

VCG

==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...