Cairn

Cairn More Than Just AI Penetration Testing — Towards General State-Space Search Cairn is a general-purpose problem-solving engine. It defines no roles, no workflows. Given an origin and a goal, it searches for a path through an unknown state space. AI Penetration Testing is one such problem — an...

pulsar

PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...

device-activity-tracker

Device Activity Tracker WhatsApp & Signal Activity Tracker via RTT Analysis ⚠️ DISCLAIMER : Proof-of-concept for educational and security research purposes only. Demonstrates privacy vulnerabilities in WhatsApp and Signal. Overview This project implements the research from the paper "Careless...

CVE-2026-100296

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler...

BootStomp

BootStomp BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To...

CVE-2026-100296

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 , a vulnerability exists in the web server's SOAP-RPC handler . An attacker with any authenticated user privileges can send an empty-body POST request to /setUserConfig to trigger a silent downgrade of the administrator password to its default va...

CVE-2026-100296 Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler...

CVE-2026-102807

OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tools requiring operator.write scope. Attackers with operator.read tokens can obtain a standalone ticket from mcp.app.view and redeem it at th...

EUVD-2026-89117

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

APTs-Adversary-Simulation

APTs Adversary Simulation A comprehensive collection of simulated Advanced Persistent Threat APT attacks based on real world tactics, techniques, and procedures TTPs used by state sponsored APT Groups from Russia, China, Iran, and North Korea !CAUTION Important Notice : This project is strictly f...

velociraptor

Velociraptor - 终端可见性与数据采集工具。 Velociraptor 是一款使用 Velociraptor 查询语言（VQL）查询来收集主机状态信息的工具。 要了解更多关于 Velociraptor 的信息，请阅读文档： https://docs.velociraptor.app/ 快速开始 如果你想了解 Velociraptor 的用途，只需： 1. 从发布页面为你喜欢的平台（Windows/Linux/MacOS）下载二进制文件。 2. 启动 GUI $ velociraptor gui 这将会启动...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC 堆越界 KVM 中 SEV-SNP 页面状态变更 PSC 处理的一个堆越界读取和写入概念验证。恶意 SEV-SNP 客户机使主机内核遍历 PSC 条目数组超出其 slab 分配末端。这会泄露相邻 kmalloc-cg-32 对象的布局，并向其中写入受控的小值，且客户机可以任意重复此操作。 完整文章：https://cyberstan.co.uk/sev-snp-oob/ | ---|--- CVE| CVE-2026-53360 组件| KVM SNP 主机支持，arch/x86/kvm/svm/sev.c 引入|...

ironclaw

IronClaw 安全可靠的个人 AI 助手，始终站在你这边 English | 简体中文 | Русский | 日本語 | 한국어 设计理念 • 功能特性 • 安装 • 配置 • 安全机制 • 系统架构 设计理念 IronClaw 基于一个简单的原则：你的 AI 助手应该为你服务，而不是与你为敌。 在 AI 系统对数据处理日益不透明、与企业利益捆绑的今天，IronClaw 选择了一条不同的路： 数据归你所有 — 所有信息存储在本地，加密保护，始终在你掌控之下 透明至上 — 完全开源，可审计，没有隐藏的遥测或数据收集 自主扩展 — 随时构建新工具，无需等待供应商更新 纵深防御 —...

netzob

Netzob：协议逆向工程、建模与模糊测试 .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 完整文档请见：https://netzob.github.io/netzob/ 关于 Netzob Netzob 是一款用于通信协议逆向工程、建模、流量生成与模糊测试的开源工具。 Netzob 适用于逆向网络协议、结构化文件以及系统和进程流（IPC 及与驱动和设备的通信）。它支持多种协议类型：文本协议（如...

obfDetect

Detección de Ofuscación Autor: mcdulltii Detecta automáticamente código ofuscado y otras máquinas de estado Descripción: Scripts para detectar automáticamente código ofuscado y máquinas de estado en binarios. La implementación se basa en IDA 7.4+ Python3. Consulte las siguientes entradas de blog...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

IPI-exposure-signal

IPI Exposure Signal This is the code repository for our paper: Your Agentic LLMs Secretly Encode Latent Signals of Indirect Prompt-Injection Exposure. ArXiv version and paper link: https://arxiv.org/abs/2608.02657 This repository implements the probing pipeline for latent IPI-exposure signals:...

ThreatKB

NOTA: ESTE REPOSITORIO ESTÁ EN ESTADO ALFA ThreatKB es un panel de gestión de flujo de trabajo de base de conocimiento para reglas YARA y artefactos C2. Las reglas se categorizan y se utilizan para indicar intención, gravedad y confianza en los artefactos acumulados. Para empezar a usar ThreatKB,...

Minimalistic-offensive-security-tools

极简 TCP 和 UDP 端口扫描器 port-scan-tcp.ps1 | port-scan-udp.ps1 一款简单而强大的 TCP 和 UDP 端口扫描器： 检测开放、关闭和过滤的端口（TCP 和 UDP 皆可） 可扫描单个主机、网络范围或文件中的主机列表 可调整超时值，实现高效可靠的端口扫描 尽管设计极简，两个端口扫描器都通过一个简单的状态文件（scanresults.txt）跟踪所有信息，该文件创建于当前工作目录。这使得扫描器在中断后可轻松恢复，或跳过已扫描的主机/端口。...

Aura-State

Aura-State Prove your AI agent is injection-safe, in-spec, and won't act out of bounds — before you ship it. A design-time verifier for LLM agents — not a runtime guardrail. Import your LangGraph / CrewAI / AutoGen / MCP agent and Aura proves five things about the agent you already wrote, then...