Veritensor

🛡️ Veritensor: AI Data & Artifact Security Veritensor is the Anti-Virus for AI Artifacts and the ultimate Firewall for RAG pipelines. It secures the entire AI Supply Chain by scanning the artifacts that traditional SAST tools miss: Models, Datasets, RAG Documents, and Notebooks. Veritensor shift...

AIL-framework

AIL Framework Open-source framework for the collection, crawling, processing, and analysis of unstructured information. AIL framework is an open-source platform to collect, crawl, process and analyse unstructured data from the clear web, Tor, I2P, chats, files and external feeds. Originally...

hobbits

About Hobbits was developed at Mahlet in 2019 as an integrated data analysis tool. It was open-sourced and is now passively maintained by Adam and anyone who wants to contribute. Join the Discord server if you want to ask questions, contribute, or just chat about binary analysis tools...

cirro

Cirro is an extensible security research platform that enables researchers and penetration testers to collect, analyze, and visualize cloud environments and identity relationships through graph databases. Built with a modular architecture, Cirro can be extended to support multiple platforms and...

CVE-2021-27905

CVE-2021-27905 Apache Solr ReplicationHandler Server Side Request Forgery SSRF Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and clien...

HackBrowserData

HackBrowserData HackBrowserData is a command-line tool for decrypting and exporting browser data passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions from the browser. It supports the most popular Chromium-based browsers and Firefox o...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

python36:3.6 security update

An update is available for python-virtualenv, module.python-nose, module.python-docutils, python-nose, module.python-pymongo, python-pygments, module.scipy, python-docs, module.python-PyMySQL, module.python-virtualenv, module.python-docs, python-distro, scipy, module.python-pygments,...

BlobHunter

BlobHunter An opensource tool for scanning Azure blob storage accounts for publicly opened blobs. BlobHunter is a part of Hunting Azure Blobs Exposes Millions of Sensitive Files research. Overview BlobHunter helps you identify Azure blob storage containers which store files that are publicly...

GEVAUDAN

GEVAUDAN Gluster Environment Vulnerable AUthentication Data Access & Nuke. Getting Started Gevaudan is a Red Hat GlusterFS exploit for CVEs 2018-1088 & 2018-1112. Available in both standalone and metasploit module formats. Presentations | Date| Conference| Link to Video| Link to Slides...

Blisqy

1. Blisqy Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability. The exploitation enables slow data siphon from a database currently supports MySQL/MariaDB only using bitwise operation on printable...

hammer

Overview Dow Jones Hammer is a multi-account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources, across all regions and accounts. It has near real-time reporting capabilities e.g. JIRA, Slack to provide quick feedback to...

conti-pentester-guide-leak

conti-pentester-guide-leak This repository was created to archive leaked leaked pentesting materials, which were previously given to Conti ransomware group affilates: obraz Mentioned materials covers topics such us: configure the Rclone software with a MEGA for data exfiltration configure the...

OSSEM

Open Source Security Events Metadata OSSEM A community-led project focused primarily on the documentation, standardization and modeling of security event logs. https://ossemproject.com/intro.html Goals Define and share a common data moel in order to improve the data standardization and...

responsible-ai-toolbox

Responsible AI Toolbox Responsible AI is an approach to assessing, developing, and deploying AI systems in a safe, trustworthy, and ethical manner, and take responsible decisions and actions. Responsible AI Toolbox is a suite of tools providing a collection of model and data exploration and...

ChameleonMini

ChameleonMini This is NOT the official repository of ChameleonMini, a freely programmable portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags, and sniff/log RF data. This repository brings support for the Chameleon Tiny. Our Project is based on the...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb remote code execution | cve-2022-22980 poc Description A Spring Data MongoDB application is vulnerable to SpEL injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value...

APEX_official

APEX Code accompanying an anonymous paper submission. The repository separates the APEX defender, benchmark data normalization, trusted capability manifests, and comparison-method integrations so that each layer can be inspected independently. Installation python -m venv .venv source...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...