SPiCa

SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

EternalBlueC

EternalBlueC EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit Contains DoublePulsar EternalBlue/MS17-010 vulnerability detector DoublePulsar detector DoublePulsar Upload DLL Doublepulsar Upload Shellcode DoublePulsar Upload DLL with SMB Structure Doublepulsar Upload Shellcode wi...

ARP-Spoof-Detector

/\ | | \ / | / | | \ | | | | / \ | | | | | | | | | | | | | | | | / /\ \ | /| / \ | ' \ / \ / | | | | | |/ \ / / | / | '| / | | \ | | | | | | | | | || | / || / | || | | // \| \| |/| ./ / /|| |/ |\||\/|| | | || Description ARP Spoof Detector Script that detects ARP Spoofing attacks on...

project-memoria-detector

project-memoria-detector The project-memoria-detector tool aims to determine whether a target network device runs a specific embedded TCP/IP stack. Currently, the tool supports fingerprints for 16 embedded TCP/IP stacks and their variations: uIP, Contiki or Contiki-NG picoTCP or picoTCP-NG Nut/Ne...

PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...

mongobleed-detector

MongoBleed Detector Offline MongoDB Analysis Tool for CVE-2025-14847 MongoBleed A standalone Linux command-line tool that analyzes MongoDB data to identify likely exploitation of CVE-2025-14847 using multiple detection modules. Table of Contents Overview Detection Modules Requirements Installatio...

bordair-multimodal

Multimodal Prompt Injection Dataset 516,588 labeled samples 251,782 attack + 251,576 benign, plus a 13,230-sample real-world validation split across five dataset versions plus external dataset ingestion, covering cross-modal, multi-turn, adversarial suffix, jailbreak template, indirect injection,...

magic-extractor

Magic Extractor Description Magic Extractor is a universal extraction tool for Windows that identifies a file with several detectors and routes it to the right bundled extractor. It aims to cover mainstream compression formats, the installers you actually see today, and a range of less common...

kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

CVE-2025-55182-Exploit-extension

RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is intended for educational and security research purposes only. It includes functionality that may be used to test for...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

StealthRL

StealthRL: AI 텍스트 감지기를 다중 탐지기 회피를 위한 강화학습 기반 패러프레이즈 공격 논문 arXiv 데모 모델 Hugging Face 벤치마크 데이터셋 Hugging Face 초록 AI 텍스트 감지기는 점점 더 중요한 환경에서 사용되고 있지만, 의미를 보존하는 적대적 재작성에 대한 견고성은 여전히 불확실합니다. 우리는 적응형 패러프레이즈 공격을 통해 AI 텍스트 감지기를 스트레스 테스트하는 강화학습 프레임워크인 StealthRL을 소개합니다. StealthRL은 의미적 내용을 보존하면서 감지기 앙상블에 대해...

react2shell-detector

React2Shell Detector 웹 애플리케이션에서 React2Shell 취약점CVE-2025-55182 및 CVE-2025-66478을 탐지하기 위한 Chrome 확장 프로그램입니다. 개요 React2Shell Detector는 보안 연구자와 웹 개발자가 웹 애플리케이션에서 잠재적인 React2Shell 취약점을 식별할 수 있도록 도와주는 브라우저 확장 프로그램입니다. 이 확장 프로그램은 안전한 탐지 페이로드를 대상 URL로 전송하고 응답을 분석하여 애플리케이션이 취약한지 여부를 판단합니다. 이 프로젝트는...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

red-detector

Red-Detector 설명 Vulshttps://vuls.io/en/를 사용하여 EC2 인스턴스를 스캔하여 취약점을 찾습니다. Lynishttps://cisofy.com/solutions/lynis를 사용하여 EC2 인스턴스를 감사하여 보안 설정 오류를 찾습니다. Chkrootkithttp://www.chkrootkit.org/을 사용하여 EC2 인스턴스에서 루트킷 징후를 스캔합니다. 요구 사항 1. 아래에 언급된 EC2 작업이 구성된 AWS 계정. 이러한 요구 사항이 포함된 정책은...

Android-CVE-2026-43499

CVE-2026-43499 Detector Android app that detects the kernel vulnerability CVE-2026-43499 — a use-after-free in rtmutex triggered via futexrequeue. Vulnerability | ---|--- CVE| CVE-2026-43499 Type| Use-after-free Component| kernel/locking/rtmutex.c Trigger| futexrequeue → proxy-lock rollback in...

nginx-ultimate-bad-bot-blocker

REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...

mimikatz-detector-busylight

Mimikatz 탐지 드라이버 - Busylight Mimikatz가 지원하는 Plenom A/S Busylight Alpha의 PID/VID0x3bca/0x27bb를 사용한 USB HID 드라이버 에뮬레이션입니다. Mimikatz가 실행되면 기본적으로 지원되는 busylight 중 하나를 찾으려는 스레드가 생성됩니다. 모든 HID 장치가 열거되며, PID/VID가 일치하면 busylight를 다양한 색상으로 깜박이게 하는 패킷이 전송됩니다. Mimikatz가 이 장치로 보내는 패킷에는 세 가지 유형이 있습니다: keepali...