Egress-Assess

Egress-Assess Egress-Assess es una herramienta utilizada para probar las capacidades de detección de datos de salida egress. Configuración Para configurarlo, ejecute el script de configuración incluido, o realice lo siguiente: 1. Instalar pyftpdlib 2. Generar un certificado de servidor y...

pipelock

Pipelock Open-source AI agent firewall forVerifiable Egress Control...

egression

Description EGRESSION is a tool that provides an instant view of how easy it is to upload sensitive data from any given network. It starts with a sensitive file with these contents, which is stored locally in plaintext. This file is used to test the egress / DLP controls on the network by...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

hush

Portable, open specification for AI agent security rules Spec · Docs · Rulesets · JSON Schema HushSpec is an open policy format for AI agent security rules. It defines what an agent may do at runtime, including filesystem access, network egress, tool usage, secret detection, and more, without...

conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

egressbuster

EgressBuster Copyright 2015 TrustedSec - EgressBuster Written by: David Kennedy ReL1K Company: TrustedSec DISCLAIMER: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal purposes period. Please read the LICENSE for the licensing ...

CVE-2022-22947

Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...

Egresser

Egresser Author: [email protected] Copyright: Cyberis Limited 2013 License: GPLv3 See LICENSE Client/server scripts designed to test outbound egress firewall rules. Description Egresser is a tool to enumerate outbound firewall rules, designed for penetration testers to assess whether egress...

terraform-aws-security-group

terraform-aws-security-group Módulo de Terraform para gestionar grupos de seguridad de AWS. Actualmente, las reglas de ingreso y egreso admiten entradas de IPv4, IPv6 e ID de grupo de seguridad. Requisitos Nombre| Versión ---|--- terraform| = 1.6 aws| = 5.0 Proveedores Nombre| Versión ---|--- aws...

yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

LeitWacht

GitLab Runner Leitwacht Control de salida de red para contenedores CI/CD de GitLab Runner. Leitwacht previene ataques a la cadena de suministro que exfiltran secretos, controlando lo que cada contenedor de trabajo puede acceder en la red. Cómo Funciona Leitwacht es un agente independiente que se...

LeitWacht Agent

leitwacht-agent https://leitwacht.eu — source of truth: https://gitlab.com/leitwacht/leitwacht-agent. Issues, MRs, and discussions live on GitLab. Pre-1.0. The 0.x series is pre-stable; minor releases may carry breaking changes to APIs, env-var names, helm values.yaml keys, and rule-file schema...

LeitWacht Agent

leitwacht-agent https://leitwacht.eu — fuente de verdad: https://gitlab.com/leitwacht/leitwacht-agent. Issues, MRs, y discusiones residen en GitLab. Pre-1.0. La serie 0.x es preestable; las versiones menores pueden incluir cambios disruptivos en APIs, nombres de variables de entorno, claves de...

iron-proxy

iron-proxy The problem CI jobs, AI coding agents, and sandboxed containers can make arbitrary outbound requests. A compromised dependency, a prompt injection, or a malicious build step can exfiltrate secrets, phone home, or open a reverse shell. Most teams have zero visibility into what's leaving...

EUVD-2026-78800

Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where getpdfpath re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to access...

CVE-2026-91943 Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy

Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where getpdfpath re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to access...

PT-2026-92062

Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where get pdf path re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to acce...

CVE-2026-12767 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-12767 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...