psad

psad - Detección de intrusiones con registros de iptables Introducción El detector de ataques de escaneo de puertos psad es un demonio ligero del sistema escrito en Perl, diseñado para trabajar con el código de cortafuegos Linux iptables/ip6tables/firewalld para detectar tráfico sospechoso como...

sticky_keys_hunter

粘滞键猎人 这是一个用于测试粘滞键和 utilman 后门的 POC bash 脚本。该脚本将连接到 RDP 服务器，发送粘滞键和 utilman 触发命令，并对结果进行截图。 此脚本是为了证明我关于以黑盒方式检测这些后门的理论而编写的，自撰写博客文章 追踪粘滞键后门 以来未再更新。然而，@DennisMald 和 @notmedic 进一步推进了这项研究，并在他们的 DEF CON 24 演讲 粘滞键通往王国之路 中发布了 粘滞键杀手 工具。请查看他们的工具，因为它在许多方面优于这个 POC 脚本。 它是如何工作的？ 1. 使用 rdesktop 连接到 RDP 2. 使用 xdoto...

vscan

vscan Herramienta de escaneo de vulnerabilidades que utiliza nmap y scripts NSE para encontrar vulnerabilidades Esta herramienta aporta un valor adicional al escaneo de vulnerabilidades con nmap. Utiliza scripts NSE que pueden añadir flexibilidad en términos de detección y explotación de...

modelaudit

ModelAudit Secure your AI models before deployment. Static scanner that detects malicious code, potential backdoor indicators, and security vulnerabilities in ML model files — without ever loading or executing them. Full Documentation | Usage Examples | Supported Formats...

RCLocals

RCLocals Inspirado en 'Autoruns' de Sysinternals, RCLocals analiza todas las posibilidades de inicio de Linux para encontrar puertas traseras, también realiza verificación de integridad de procesos, escanea procesos con inyección de DLL y mucho más Aspectos cubiertos: ·Listar claves GPG de...

changeme

changeme Un escáner de credenciales por defecto. Acerca de changeme retoma donde los escáneres comerciales lo dejan. Se centra en detectar credenciales por defecto y puerta trasera, no necesariamente credenciales comunes. Su modo predeterminado es escanear credenciales HTTP por defecto, pero tien...

TNC-Defense

TNC-Defense TNC-Defense proporciona código de investigación para detectar y desintoxicar puertas traseras en modelos de difusión de texto a imagen. El repositorio incluye actualmente pipelines de detección para Stable Diffusion v1.4, Stable Diffusion v1.5, Stable Diffusion XL y Stable Diffusion 3...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information. The following files and logs will be checked Latest version 1.13: Template folders for XML files Apache Access logfiles Apache Error...

CVE-2021-44228

CVE-2021-44228 Rilevamento backdoor per VMware View Horizon Include una canary con invio opzionale. Ovviamente da usare a proprio rischio, eccetera eccetera. Progettato per essere eseguito sui server di connessione VMware Horizon su Windows. Non esamina le appliance UAG sono Photon Linux...

CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP Via OOD Trigger Inversion

Organisations with limited data and computational resources increasingly outsource model training to Machine Learning as a Service MLaaS providers, who adapt vision-language models VLMs such as CLIP to downstream tasks via prompt tuning rather than training from scratch. This semi-honest setting...

Detecting backdoored language models at scale

Today, we are releasing new research on detecting backdoors in open-weight language models. Our research highlights several key properties of language model backdoors, laying the groundwork for a practical scanner designed to detect backdoored models at scale and improve overall trust in AI...

Detecting backdoored language models at scale

Today, we are releasing new research on detecting backdoors in open-weight language models. Our research highlights several key properties of language model backdoors, laying the groundwork for a practical scanner designed to detect backdoored models at scale and improve overall trust in AI...

LoRA As Oracle

Backdoored and privacy-leaking deep neural networks pose a serious threat to the deployment of machine learning systems in security-critical settings. Existing defenses for backdoor detection and membership inference typically require access to clean reference models, extensive retraining, or...

Cross-LLM Generalization of Behavioral Backdoor Detection in AI Agent Supply Chains

As AI agents become integral to enterprise workflows, their reliance on shared tool libraries and pre-trained components creates significant supply chain vulnerabilities. While previous work has demonstrated behavioral backdoor detection within individual LLM architectures, the critical question ...

PoTS: Proof-Of-Training-Steps for Backdoor Detection in Large Language Models

As Large Language Models LLMs gain traction across critical domains, ensuring secure and trustworthy training processes has become a major concern. Backdoor attacks, where malicious actors inject hidden triggers into training data, are particularly insidious and difficult to detect. Existing...

Binary Diff Summarization Using Large Language Models

Security of software supply chains is necessary to ensure that software updates do not contain maliciously injected code or introduce vulnerabilities that may compromise the integrity of critical infrastructure. Verifying the integrity of software updates involves binary differential analysis...

Coward: toward Practical Proactive Federated Backdoor Defense Via Collision-Based Watermark

Backdoor detection is currently the mainstream defense against backdoor attacks in federated learning FL, where malicious clients upload poisoned updates that compromise the global model and undermine the reliability of FL deployments. Existing backdoor detection techniques fall into two...

DUP: Detection-Guided Unlearning for Backdoor Purification in Language Models

As backdoor attacks become more stealthy and robust, they reveal critical weaknesses in current defense strategies: detection methods often rely on coarse-grained feature statistics, and purification methods typically require full retraining or additional clean models. To address these challenges...

Exploit for Improper Access Control in Elasticsearch

欢迎各位大佬提BUG,当前版本 AssetScanV1.3 周期 初版：2019年11月28日 V1.0初版编写完成 修改1：2019年12月02日 感谢Shadow·J反馈kali下文件导入异常 修改2：2019年12月03日 V1.1发布，新增ARP存活检测（回滚，测bug） 修改3：2019年12月04日 V1.2发布，修复漏洞脚本异常，修复weblogic脚本 修改4：2019年12月05日 V1.2修改，感谢sevck提供设计思路以及代码不规范问题 修改5：2019年12月05日 V1.2修改，修复IP数据处理异常 修改6：2019年12月19日...

SerComm Network Device Backdoor Detection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SerComm Network Device Backdoor Detection', 'Description' = %q This module can identify SerComm manufactured network devices which contain a...