943 matches found
clawdstrike
Clawdstrike 为群智时代打造的EDR。 默认拒绝，签名真相。 状态：pre-1.0 beta 。公开API已稳定；默认值在1.0之前可能进一步收紧。 Clawdstrike 是一个策略引擎、一个EDR，以及一个签名审计链，三者合为一体。AI 代理的 toolcall 与内核级的 fileaccess、processexec、networkflow、dylibload 或 launchpersistence 在同一事件分类体系中。一个策略引擎评估它们。一个 Ed25519 签名的因果图记录它们。默认行为是拒绝（fail closed）。 同一个引擎以 Rust...
Binvariants
Binvariants：面向二进制的寄存器级不变量引导模糊测试 本仓库为 Binvariants 的源代码：一个原型模糊测试框架，利用寄存器级潜在不变性违规对二进制程序进行模糊测试。 该工作发表于我们的论文 Binvariants: Enhancing Fuzzing of Closed-source Binary Executables via Register-level Likely Invariants，将出现在 2026 年 ACM 国际软件基础工程会议 FSE'26 上。 安装 Binvariants 使用 Binvariants 附加说明 Bug 奖杯展示 引用本仓库： |...
unicorn
Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...
redthread
RedThread 发现漏洞，评判它，起草修复方案，证明变化。 RedThread 是一个以 CLI 优先的框架，用于测试 LLM 系统、验证失败案例，并将确认的漏洞转化为有证据支持的安全候选方案。 它专为那些需要的不仅仅是单次越狱演示的团队而构建。一次 RedThread 活动会运行攻击、对结果评分、综合候选防护措施、重放证据，并保持提升边界清晰明确。 当前状态： 活跃的研究和工程项目。该系统适用于本地活动、重放证据、确定性智能体安全检查以及操作员审查。它不声称适用于通用的生产环境强制执行。 RedThread 存在的原因 大多数 AI 红队工具只回答一个问题：...
InterceptSuite
InterceptSuite !IMPORTANT Este repositorio ha sido archivado. El código base activo de InterceptSuite ahora es de código cerrado y solo de pago. Consulta los detalles a continuación. Acerca de InterceptSuite fue creado para resolver un problema de larga data en las pruebas de seguridad: intercept...
thelightscope
LightScope 看清你的扫描者 LightScope 是一款轻量级的开源网络安全监控工具，能将关闭的端口转化为蜜罐。无需专用基础设施，即可发现谁在扫描你的系统。 由 USC信息科学研究所 提供。 它能做什么 监控关闭端口上的攻击者连接 运行蜜罐服务以观察攻击模式 向 AbuseIPDB 和 ISP 报告攻击者 生成个性化的 IP 黑名单 提供 Web 仪表盘，网址为 thelightscope.com 它不是 LightScope 并非防病毒或 EDR 软件。它不会拖慢系统速度，也不会干扰你的应用程序。它被动地观察网络流量，并在你未使用的端口上运行轻量级蜜罐服务。 使用场景 服务器...
scopeblind-gateway
protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline-verifiable Ed25519 receipt...
uniFuzzer
uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently it supports fuzzing 32-bits LSB ELF files on ARM/MIPS, which are usually seen in IoT devices. 中文介绍 Features very little hack and easy to build can target any specified function or code snipp...
CVE-2026-72898
Aviso sobre el comportamiento de Toucan2 y map sin :closed true...
xray
Welcome to xray 👋 一款功能强大的安全评估工具 🏠使用文档 • ⬇️xray下载 • ⬇️xpoc下载 • ⬇️xapp下载 • 📖插件存储库 English Version 注意：xray系列不开源，直接下载构建的二进制文件即可，仓库内主要为社区贡献的 poc，每次 xray 发布将自动打包。 ✨ xray2.0 为了解决 xray 1.0在功能增加过程中变得复杂且臃肿的问题，我们推出了 xray 2.0。 这一全新版本致力于提升功能使用的流畅度，降低使用门槛，并帮助更多安全行业从业者以更高效的模式收获更好的体验。xray 2.0...
syswarden
SysWarden Defensa Linux. Tu host. Tus reglas. Defensa Linux local al host con aplicación auditable y de cierre seguro fail-closed. Sitio w...
aegis-audio-defense
AEGIS: Audio Endogenous Guarding via Internal Signals Against Large Audio-Language Model Jailbreaks Submitted to ICASSP 2027. AEGIS keeps the target audio-language model frozen and adds a mid-layer risk gate that conditionally drives late-layer safety adapters, with closed-loop scaling at...
DcRat
DcRat Because I've heard more and more abuses of DcRat.I decided that i won't update this any more.The dev version will be also closed later. 由于听说了越来越多的对DcRat的滥用，所以我决定不再更新这个项目，在开发中的新版本稍后也会关闭。 New Version Preview: https://www.bilibili.com/video/BV1kD4y1F7uY Won't Open Source. Also Won't sell...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerabilities (USN-8863-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8863-1 advisory. Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio...
USN-8863-1: GStreamer Good Plugins vulnerabilities
Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-17072 Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker cou...
USN-8863-1 gst-plugins-good1.0 vulnerabilities
Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-17072 Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker cou...
CVE-2026-102822
Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR or CBC block cipher because the selection logic validates needsmac only when MAC selection fails. A remote peer can then send a packet with a...
com.github.luben/zstd-jni: zstd-jni: Use-After-Free vulnerability allows memory corruption and denial of service
A flaw was found in zstd-jni. An attacker could exploit a use-after-free vulnerability by calling specific methods on closed streams without proper validation. This could lead to memory corruption, potentially allowing the attacker to corrupt unrelated objects or cause the Java Virtual Machine JV...
Cross-site Scripting (XSS)
Paella Player is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of closed-caption cue text, which allows an attacker to inject malicious script content through captions and execute it in a victim's browser...
