taowu-cobalt_strike

梼杌 基于cobalt strike平台的红队自动化框架 仅供交流与学习使用，请勿用于非法用途！ 插件里面利用到的exp均为网上搜集，不保证安全问题，请务必自主进行相关安全审查！ English-version 感谢vcarus提供英文翻译支持 Thanks to vcarus for English translation support 功能简介 公开版 完整版...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

metarget

中文 | English 1 项目介绍 Metarget的名称来源于meta-（元）加target（目标，靶机），是一个脆弱基础设施自动化构建框架，主要用于快速、自动化搭建从简单到复杂的脆弱云原生靶机环境。 「绿盟科技研究通讯」上发布了一篇阐述Metarget的设计理念和技术目标的文章，见Metarget：云原生攻防靶场开源啦！。 1.1 项目的缘起 在研究漏洞时，我们经常会发现“环境搭建”这一步骤本身就会占用大量的时间，与之相比，真正测试PoC、ExP的时间可能非常短。由于许多官方镜像在国内的网络环境下并不方便获得，加上云原生组件自身的复杂性，在云原生安全领域，前述问题尤为明显。...

stoq

快速开始 文档 安装 插件仓库 插件文档 概述 stoQ 是一个自动化框架，旨在简化分析师需要执行的繁琐且重复的任务。它使分析师和 DevSecOps 团队能够借助丰富且一致的数据结构，在不同数据源、数据库、解码器/编码器以及众多其他任务之间快速切换。stoQ 的设计目标是既具备企业级就绪性和可扩展性，同时又足够精简，适合个人安全研究人员使用。 为什么使用 stoQ？ 极其轻量级，设计以简洁为核心。 完整支持 AsyncIO。 提供广泛的公开可用插件。 stoQ 不对你的工作流做任何假设。分析师决定一切，从数据来源、扫描/解码/处理方式，到数据存储位置。...

anti-anti-automation

Anti-Anti-Automation Framework Un framework de técnicas para evadir los controles de seguridad anti-automatización comunes. Controles comunes anti-automatización Verificación de correo electrónico CAPTCHA SMS/Teléfono Tarjeta de crédito WASC-21: Anti-automatización insuficiente...

VulnPilot

VulnPilot VulnPilot is an automation framework for vulnerabil...

CVE-2026-46538

CVE-2026-46538 affects Microsoft UFO open-source framework; in version 3.0.1-4-ge2626659, the constellation client tracks pending task responses by session_id and does not bind completion to the originating device. An authenticated peer can forge a TASK_END with the same session_id to inject atta...

CVE-2026-46414

Technical details are not publicly available in the provided documents. Monitor for updates.

PwnGPT-Automation

PwnGPT Caputre the flag with Large Language Models. Constructe...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Hellxss

██╗ ██╗███████╗██╗ ██╗ ██╗ ██╗███████╗███████╗ █...

MUZZLE: Adaptive Agentic Red-Teaming of Web Agents against Indirect Prompt Injection Attacks

Large language model LLM based web agents are increasingly deployed to automate complex online tasks by directly interacting with web sites and performing actions on users' behalf. While these agents offer powerful capabilities, their design exposes them to indirect prompt injection attacks...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

EUVD-2012-4741

Malware in sbrugna...

EUVD-2025-7802

Malicious code in bioql PyPI...

Cloud Investigation Automation Framework (CIAF): An AI-Driven Approach to Cloud Forensics

Large Language Models LLMs have gained prominence in domains including cloud security and forensics. Yet cloud forensic investigations still rely on manual analysis, making them time-consuming and error-prone. LLMs can mimic human reasoning, offering a pathway to automating cloud log analysis. To...

Orion: Fuzzing Workflow Automation

Fuzz testing is one of the most effective techniques for finding software vulnerabilities. While modern fuzzers can generate inputs and monitor executions automatically, the overall workflow, from analyzing a codebase, to configuring harnesses, to triaging results, still requires substantial manu...

Malicious code in wdc-automation-framework (npm)

The package wdc-automation-framework was found to contain malicious code...

MAL-2025-38947 Malicious code in wdc-automation-framework (npm)

The package wdc-automation-framework was found to contain malicious code...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...