metabigor v2.2.0

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

nuclei v3.11.1

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

Exploit for CVE-2026-64638

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behav...

AutoSRC-AISkill

AutoSRC-AISkill A fully automated SRC vulnerability discover...

[SECURITY] Fedora 44 Update: bird-3.3.2-1.fc44

BIRD is a dynamic IP routing daemon supporting both, IPv4 and IPv6, Border Gateway Protocol BGPv4, Routing Information Protocol RIPv2, RIPng, Open Shortest Path First protocol OSPFv2, OSPFv3, Babel Routing Protocol Babel, Bidirectional Forwarding Detection BFD, IPv6 router advertisements, static...

SSHafe: A Real-Time SSH Brute Force Attack Detection and Novel Credential Rotation Standard

SSH remains a critical yet heavily targeted protocol for remote system administration, with password-based authentication exposing servers to large-scale brute-force, dictionary, and credential-spray attacks. Existing rule-based defences such as Fail2Ban fail to detect slow, distributed, or...

A Combined Feature-Based Framework for Disguise and Spoofing Detection in Face Recognition Systems

Face recognition systems face two distinct, commonly-separated failure modes: spoofing, where an impostor presents a photograph or video of an authorized user, and disguise, where a legitimate user is rejected because their appearance differs from their enrolled template due to accessories, facia...

From Noise to Meaning: Meaningful Secret Sharing with Tamper Detection for Facial Recognition

Popularity of AI-based face recognition system directly demands protection of sensitive biometric data used for training. Visual secret sharing is an interesting idea, as it splits facial images into secret shares that look random and spread across many institutions. However, these shares look li...

LLM Prompt Injection Surface Detection

Probes OpenAI-compatible /v1/chat/completions, Ollama, and generic /api/chat endpoints for unauthenticated inference — prompt injection and tool abuse entry points. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed LLM chat/completion endpoints prompt injection surface.""" from...

Magic Link / Passwordless Auth Surface Detection

Probes common magic-link and passwordless paths NextAuth, custom APIs for exposed email submission endpoints and sign-in link flows. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed magic link and passwordless authentication endpoints.""" from kittysploit import from...

maltrail v3.0

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

SkillSpector v2.8.2

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

deadair v0.5.1

Open-source SIEM detection health. Find enabled detections that are blind because their telemetry is missing, stale, late, or schema-incompatible. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly Real scan of a...

Antiphishing v31231970767

DONATE - DASHBOARD VECTORS - CONTRIBUTING - SUBMIT A VECTOR - REST API CTI - WIKI Protect against phishing attacks Functionality This rule is built using malicious URLs and domains involved in phishing attacks. We utilize some community APIs and NRD Newly Registered Domain to construct these...

nerva v1.64.3

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

maltrail v3.0-rc1

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

PoC2Rule

PoC2Rule Agent Automatically convert PoC Proof of Concept f...

Understanding Security and Privacy Perceptions of Content Creators Regarding AI Labels of AI-Generated Content

AI labels, typically implemented via underlying tracing mechanisms such as watermarks and metadata, are crucial for protecting Artificial Intelligence-Generated Content AIGC against security threats like disinformation and evasion. However, the perceived devaluation of AI-assisted work discourage...

Exploit for CVE-2026-64638

CVE-2026-64638 — Nuclei Detection Template Template Nuclei...

akto vthreat-1.15.3

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...