EmailXpose

EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...

cuckoo-modified

This is a heavily modified version of Cuckoo Sandbox provided under the GPL. It offers a number of advantages over the upstream Cuckoo: Fully-normalized file and registry names 64-bit analysis Handling of WoW64 filesystem redirection Many additional API hooks Service monitoring Correlates API cal...

vi-bot

BotDetect v2 — Production Bot Detection Library Client-side bot and automation detection library with weighted scoring, behavioral analysis, browser fingerprinting, and configurable thresholds. Detects headless browsers, Selenium, Puppeteer, Playwright, CDP-based tools, and stealth automation...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

dynmx

Prototipo de dynmx dynmx pronunciado dynamics es un enfoque de detección basado en firmas para características de comportamiento de malware basado en secuencias de llamadas a la API de Windows. De manera simplificada, puede pensar en dynmx como una especie de YARA para trazas de llamadas a la API...

third-thoughts

Third Thoughts A Lightless Labs research project studying AI agent behavior at scale through multi-disciplinary corpus analysis basically, throwing stuff at the wall and seeing what sticks. Named after Tiffany Aching's concept from Discworld: first thoughts agents thinking, second thoughts agents...

nginx-rift-detect

nginx-rift-detect Behavioral detection script for CVE-2026-42945 NGINX Rift — a heap buffer overflow in ngxhttprewritemodule present in nginx since 2008. ⚠️ Disclaimer This tool is intended solely for authorized security testing and research. Only run this against systems you own or have explicit...

Kaonashi

Proyecto Kaonashi: RootedCON 2019 Este repositorio contiene varios directorios: Máscaras ordenadas para hashcat Reglas avanzadas para hashcat Enlaces para descargar las Wordlists de Kaonashi Diapositivas usadas en nuestra charla I know your p4$$w0rd and if I don't, I will guess it... en RootedCON...

DrSemu

Dr.Semu Dr.Semu запускает исполняемые файлы в изолированной среде, отслеживает поведение процесса и на основе правил Dr.Semu, созданных вами или сообществом, определяет, является ли процесс вредоносным. Инструмент находится на ранней стадии разработки об авторе: @qazqaz С помощью Dr.Semu вы может...

droidbox

Introducción DroidBox ha sido desarrollado para ofrecer análisis dinámico de aplicaciones Android. La siguiente información se describe en los resultados, generados cuando el análisis está completo: Hashes del paquete analizado Datos de red entrantes/salientes Operaciones de lectura y escritura d...

ActBench

ActBench ActBench is a self-evolving benchmark of behavioral safety in cowork agents. It defines behavioral safety as whether an agent's execution remains within the permissions and state changes required by a benign task, and evaluates realized behavioral risk from execution trajectories rather...

EUVD-2026-68138

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82423

A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...

Pegasus-Malware-Scan

pegasus-malware-scan Descrizione Pegasus Malware Scan è una soluzione completa di cybersecurity progettata per il rilevamento avanzato delle minacce e l'analisi dei malware. Realizzato con Python, questo potente strumento utilizza tecniche di rilevamento multi-livello per identificare e...

PT-2026-83500

Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A remote issue exists in the Payment Status Endpoint component within the /order/paySuccess file. Manipulation of the orderId argument allows an attacker to enforce a behavioral workflow...

VISION-ProcMon

Informazioni VISION-ProcMon è uno strumento dedicato all'analisi dei malware e in particolare all'analisi comportamentale. VISION-ProcMon utilizza una combinazione di tecnologie Rust e web per fornire una visualizzazione rapida e migliore del comportamento di un malware dopo averne catturato...

Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PowerShellProfiler

PowerShellProfiler Dieser Projektcode stammt von https://github.com/pan-unit42/publictools/tree/master/powershellprofiler Einführung PowerShellProfiler.py ist ein Skript zur statischen Analyse von PowerShell-Skripten, indem der Inhalt deobfuskiert und normalisiert wird, der anschließend auf...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...