sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

CyberStrike

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी The first open-source AI agent built for offensive security. Automated...

pentest-guide

Penetration Test Guide based on the OWASP + Extra This guide is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cas...

fuzzowski

Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas La idea es ser el Fuzzer de Protocolos de Red que queramos usar. El objetivo de esta herramienta es ayudar durante todo el proces...

get-test-cases-from-tfs (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-26013 via langchain-core (0.1.24)

langchain-core PYPI version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - get-test-cases-from-tfs =0.2.0, =0.3.0 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

genai-agents (>=0.1.0, <=0.1.3), get-test-cases-from-tfs (>=0.2.0, <=0.3.0) +1 more potentially affected by CVE-2026-55443 via langchain (0.1.8)

langchain PYPI version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - genai-agents =0.1.0, =0.2.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

Grimoire

書 — The Pentesterʼs Spellbook Answer the questions. Unleash th...

genai-agents (>=0.1.0, <=0.1.3), get-test-cases-from-tfs (>=0.2.0, <=0.3.0) +1 more potentially affected by CVE-2026-55443 via langchain (0.1.8)

langchain PYPI version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - genai-agents =0.1.0, =0.2.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

CVE-2026-46289

In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extractkvectosg Patch series "Fix bugs in extractitertosg", v3. Fix bugs in the kvec and user variants of extractitertosg. This series is growing due to useful remarks made by...

CVE-2026-46289

In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extractkvectosg Patch series "Fix bugs in extractitertosg", v3. Fix bugs in the kvec and user variants of extractitertosg. This series is growing due to useful remarks made by...

Exploiting Logic Asymmetry in Modern Web Application Firewalls

This research whitepaper demonstrates that even the most modern WAFs remain vulnerable to attacks exploiting logic asymmetry in HTTP protocol processing. Real-world testing on a Weaver Ecology OA system achieved a 100% bypass rate 40/40 test cases, confirming the critical severity of this...

LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments

The rapid proliferation of LLM-based autonomous agents in real operating system environments introduces a new category of safety risk beyond content safety: behavior jailbreak, where an adversary induces an agent to execute dangerous OS-level operations with irreversible consequences. Existing...

ACIArena: Toward Unified Evaluation for Agent Cascading Injection

Collaboration and information sharing empower Multi-Agent Systems MAS but also introduce a critical security risk known as Agent Cascading Injection ACI. In such attacks, a compromised agent exploits inter-agent trust to propagate malicious instructions, causing cascading failures across the...

A Systematic Security Evaluation of OpenClaw and Its Variants

Tool-augmented AI agents substantially extend the practical capabilities of large language models, but they also introduce security risks that cannot be identified through model-only evaluation. In this paper, we present a systematic security assessment of six representative OpenClaw-series agent...

get-test-cases-from-tfs (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-34070 via langchain-core (0.1.24)

langchain-core PYPI version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - get-test-cases-from-tfs =0.2.0, =0.3.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

get-test-cases-from-tfs (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-34070 via langchain-core (0.1.24)

langchain-core PYPI version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - get-test-cases-from-tfs =0.2.0, =0.3.0 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

Towards Leveraging LLMs to Generate Abstract Penetration Test Cases from Software Architecture

Software architecture models capture early design decisions that strongly influence system quality attributes, including security. However, architecture-level security assessment and feedback are often absent in practice, allowing security weaknesses to propagate into later phases of the software...

CodeHacker: Automated Test Case Generation for Detecting Vulnerabilities in Competitive Programming Solutions

The evaluation of Large Language Models LLMs for code generation relies heavily on the quality and robustness of test cases. However, existing benchmarks often lack coverage for subtle corner cases, allowing incorrect solutions to pass. To bridge this gap, we propose CodeHacker, an automated agen...

get-test-cases-from-tfs (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-26013 via langchain-core (0.1.24)

langchain-core PYPI version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - get-test-cases-from-tfs =0.2.0, =0.3.0 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

CVE-2026-23077

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge Patch series "mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge", v2. Commit 879bca0a2c4f "mm/vma: fix incorrectly disallowed anonymous VMA merges" introduced th...