41 matches found
lightbulb-framework
LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...
bfac
BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...
megaquagga-pentest-report
megaquagga-pentest-report Black box penetration test — WordPress exploitation, privilege escalation via CVE-2022-0847...
dnsmasq-cve-2026
dnsmasq CVE-2026 QA Verification Tool Automated black-box tool for verifying 6 dnsmasq vulnerabilities May 2026. Sends attack packets to a live DUT and reports PASS/FAIL — no source code access needed. Quick Start Set DUT DNS to your laptop's WAN IP via GUI first, then: sudo python3...
promptmap
O O o.-. ¡Humanos, no os resistáis! |/ ,-'-. / /, / /|.-.| / --O-- .--"""/\ /\ | o.o / De Utku Sen /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /|| | ./| || , | .// / / |-----| || | | || || promptmap2 es un escáner automatizado de inyección de instrucciones par...
pulsar
PULSAR Aprendizaje de Protocolos, Simulación y Fuzzer con Estado Pulsar es un fuzzer de red con capacidades automáticas de aprendizaje y simulación de protocolos. La herramienta permite modelar un protocolo mediante técnicas de aprendizaje automático, como clustering y modelos de Markov. Estos...
bfac
BFAC Pruebas avanzadas de artefactos de archivos de respaldo para aplicaciones web BFAC Backup File Artifacts Checker es una herramienta automatizada que verifica artefactos de respaldo que pueden revelar el código fuente de la aplicación web. Los artefactos también pueden provocar la filtración ...
Auditing Anonymous AI Models: A Four-Stage Protocol for Black-Box Identity Verification
The 2025--2026 AI market has seen a wave of stealth releases: frontier models launched anonymously on developer platforms under codenames. For their users, identity determines data-handling terms, supply-chain risk, and capability expectations. No validated methodology exists for black-box identi...
WuppieFuzz v1.7.1
WuppieFuzz v1.8.0 TNO developed WuppieFuzz, a coverage-guided REST API fuzzer developed on top of LibAFL, targeting a wide audience of end-users, with a strong focus on ease-of-use, explainability of the discovered flaws and modularity. WuppieFuzz supports all three settings of testing black box,...
notevault-vapt-assessment
Black-Box VAPT Assessment — NoteVault A self-contained, repro...
pt-identity__AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure !1https://u...
dvwa-webapp-vapt
dvwa-webapp-vapt Black-box penetration test of D...
VibeHacking
👾 Welcome to Vibe Hacking By BlackPC, Vine & Foxxino Inc...
Black_Box-Penetration-Testing
BlackBox-Penetration-Testing Black-box penetration test again...
AutoPentest: Enhancing Vulnerability Management with Autonomous LLM Agents
A recent area of increasing research is the use of Large Language Models LLMs in penetration testing, which promises to reduce costs and thus allow for higher frequency. We conduct a review of related work, identifying best practices and common evaluation issues. We then present AutoPentest, an...
OET: Optimization-Based Prompt Injection Evaluation Toolkit
Large Language Models LLMs have demonstrated remarkable capabilities in natural language understanding and generation, enabling their widespread adoption across various domains. However, their susceptibility to prompt injection attacks poses significant security risks, as adversarial inputs can...
GHSA-86H2-2G4G-29QX avo possible unsafe reflection / partial DoS vulnerability
Summary The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record. Details After reviewing th...
What is an External Penetration Test?
A penetration test also known as a pentest is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the...
Dynamic analysis of firmware components in IoT devices
Among the various offensive security techniques, vulnerability assessment takes priority when it comes to analyzing the security of IoT/IIoT devices. In most cases, such devices are analyzed using the black box testing approach, in which the researcher has virtually no knowledge about the object ...