41 matches found
promptmap
O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 कस्टम LLM अनुप्रयोगों के लिए एक स्वचालित प्रॉम्प्ट इंजेक्शन...
pulsar
PULSAR प्रोटोकॉल लर्निंग, सिमुलेशन और Stateful Fuzzer Pulsar एक नेटवर्क फ़ज़र है जिसमें स्वचालित प्रोटोकॉल सीखने और सिमुलेशन की क्षमताएँ हैं। यह उपकरण मशीन लर्निंग तकनीकों, जैसे क्लस्टरिंग और मार्कोव मॉडल, के माध्यम से एक प्रोटोकॉल को मॉडल करने की अनुमति देता है। इन मॉडलों का उपयोग Pulsar और एक...
lightbulb-framework
LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...
bfac
BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...
bfac
BFAC उन्नत बैकअप-फ़ाइल आर्टिफैक्ट्स टेस्टिंग वेब-एप्लिकेशन के लिए BFAC बैकअप फ़ाइल आर्टिफैक्ट्स चेकर एक स्वचालित उपकरण है जो बैकअप आर्टिफैक्ट्स की जांच करता है जो वेब-एप्लिकेशन के सोर्स कोड को प्रकट कर सकते हैं। ये आर्टिफैक्ट्स संवेदनशील जानकारी, जैसे पासवर्ड, डायरेक्टरी संरचना आदि के रिसाव का का...
dnsmasq-cve-2026
أداة التحقق من ثغرات dnsmasq CVE-2026 أداة صندوق أسود آلية للتحقق من 6 ثغرات في dnsmasq مايو 2026. ترسل حزم هجوم إلى جهاز قيد الاختبار DUT وتُبلغ عن نجاح/فشل — بدون الحاجة إلى الوصول إلى الكود المصدري. بداية سريعة قم بتعيين DNS الخاص بـ DUT إلى عنوان IP للشبكة الواسعة WAN للابتوب عبر الواجهة...
megaquagga-pentest-report
megaquagga-pentest-report اختبار اختراق الصندوق الأسود — استغلال ووردبريس، تصعيد الصلاحيات عبر CVE-2022-0847...
Auditing Anonymous AI Models: A Four-Stage Protocol for Black-Box Identity Verification
The 2025--2026 AI market has seen a wave of stealth releases: frontier models launched anonymously on developer platforms under codenames. For their users, identity determines data-handling terms, supply-chain risk, and capability expectations. No validated methodology exists for black-box identi...
WuppieFuzz v1.7.1
WuppieFuzz v1.8.0 TNO developed WuppieFuzz, a coverage-guided REST API fuzzer developed on top of LibAFL, targeting a wide audience of end-users, with a strong focus on ease-of-use, explainability of the discovered flaws and modularity. WuppieFuzz supports all three settings of testing black box,...
notevault-vapt-assessment
Black-Box VAPT Assessment — NoteVault A self-contained, repro...
pt-identity__AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure !1https://u...
dvwa-webapp-vapt
dvwa-webapp-vapt Black-box penetration test of D...
VibeHacking
👾 Welcome to Vibe Hacking By BlackPC, Vine & Foxxino Inc...
Black_Box-Penetration-Testing
BlackBox-Penetration-Testing Black-box penetration test again...
AutoPentest: Enhancing Vulnerability Management with Autonomous LLM Agents
A recent area of increasing research is the use of Large Language Models LLMs in penetration testing, which promises to reduce costs and thus allow for higher frequency. We conduct a review of related work, identifying best practices and common evaluation issues. We then present AutoPentest, an...
OET: Optimization-Based Prompt Injection Evaluation Toolkit
Large Language Models LLMs have demonstrated remarkable capabilities in natural language understanding and generation, enabling their widespread adoption across various domains. However, their susceptibility to prompt injection attacks poses significant security risks, as adversarial inputs can...
GHSA-86H2-2G4G-29QX avo possible unsafe reflection / partial DoS vulnerability
Summary The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record. Details After reviewing th...
What is an External Penetration Test?
A penetration test also known as a pentest is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the...
Dynamic analysis of firmware components in IoT devices
Among the various offensive security techniques, vulnerability assessment takes priority when it comes to analyzing the security of IoT/IIoT devices. In most cases, such devices are analyzed using the black box testing approach, in which the researcher has virtually no knowledge about the object ...