skillscript

Safe, reusable automation authored by agents. skillscript.ai • docs TL;DR — npm install -g skillscript-runtime && skillfile init && skillfile dashboard. See Quickstart. What is Skillscript? Skillscript came from asking: what would a Makefile look like if it built skills instead of binaries? The...

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

vercel-botid

Vercel BotID Solver / "X-Is-Human" Header basic mode Overview This project provides a Golang-based solver for the Vercel BotID challenge. It uses go-fAST to deobfuscate and then extract every value required. blazingly fast ⭐ Show your Support Please star the repository if you find it useful! Your...

EUVD-2026-92153

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attac...

CVE-2026-105173

A cross-site scripting (XSS) vulnerability exists in code-projects Human Resource Management 1.0 . The flaw is located within the Event Creation component, specifically affecting an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php. By manipulating the eventSubject ...

psudohash

psudohash Cool New Features of v1.1.0 Special thanks to DavidAngelos: ▶️ Added a progress bar in every step to track execution. ▶️ Added options: In-order joins -i / --inorder: join keywords only in the original order e.g. foo,bar,baz → foo, bar, baz, foobar, foobaz, barbaz, foobarbaz. All-order...

Umbrella_android

Umbrella Umbrella is an Android mobile app developed by Security First that provides human rights defenders with the information on what to do in any given security situation and the tools to do it. It allows the user to choose what they want to do, such as: protect data; securely make a...

MakerChecker

🛡️ MakerChecker The open-source security layer for AI agents. Deny-by-default enforcement, human approvals, and a cryptographically signed audit trail — so your agent runs only what it's granted and provably can't approve its own work. Website · Live Demo · mc scan · Docs Your agents keep running...

AntiVE-BehaviorWatch

AntiVE-BehaviorWatch Embedded AI-powered human behavior verification for cybersecurity research. What is AntiVE-BehaviorWatch? AntiVE-BehaviorWatch is a Windows-based cybersecurity research project that explores a new approach to execution control using embedded artificial intelligence. Instead o...

OneAlert

OneAlert AI Security OS Open-source autonomous cyber defense for industrial networks AI agents that detect, investigate, hunt, and respond to threats across your OT/ICS infrastructure — with human approval gates and full audit trails. Demo Setup · Features · Quick Start · Architecture Try It Now...

HiddenEyeReborn

Introduction The HiddenEye: Reborn tool is a project aimed at exploiting human error. As my second attempt at creating a comprehensive tool for this purpose, it presently has numerous phishing features. We intend to add more functionality soon. Keep up with our progress by checking out our roadma...

investigations

Investigations This repository contains indicators of compromise extracted from some of Amnesty International's technical investigations in targeted threats against human rights defenders. These indicators are shared under the license CC-BY...

crx-scouter

中文文档 crx-scouter.js can detect which Chrome extensions we are using quietly, and can detect whether the person before the browser is a awesome hacker or a high-end programmer 🐱, It can be used for honeypots, human-machine identification, countermeasures of ad blocking, pre-checks for extension...

GitGot

Description GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of...

TamarinAgent

信頼度誘導型プロトコルIRレビューUI このリポジトリには、LLM支援によるセキュリティプロトコルモデリングのためのローカルなhuman-in-the-loop UIが含まれています。これは我々の研究で説明されているワークフローをサポートします： LLM支援セキュリティプロトコルモデリングのための信頼度誘導型プロトコルIR このシステムは、自然言語によるプロトコル記述とSapic+/Tamarin生成の間のセマンティックチェックポイントとしてプロトコル中間表現（IR）を導入し、レビュー担当者が形式的検証の前にLLM生成のプロトコルモデルのセマンティックな正確性を監査できるようにします。...

sdk

@cosignet/sdk Thin, zero-dependency TypeScript client for Cosignet — human-in-the-loop approval for high-risk AI-agent actions, with payload-bound passkey signatures. Put a human in the loop before a dangerous action runs: pause it, get an explicit passkey approval from a person Face ID / Touch I...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1779740981)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1779740981 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported version...

CVE-2021-42561

CVE-2021-42561: MITRE CalderaのHumanプラグインを介したコマンドインジェクション Caldera（バージョン=2.8.1）では、Humanプラグインがサニタイズされていないnameパラメータをpythonの"os.system"関数に渡します。これにより、攻撃者はシェルのメタ文字（例：バッククォート "" またはドル括弧 "$" ）を使用して、現在のコマンドからエスケープし、任意のシェルコマンドを実行できます。 ベンダーの開示: この脆弱性に関するベンダーの開示はこちらにあります。 必要条件: この脆弱性には以下が必要です: 有効なユーザー認証情報 概念実...

Linux Distros Unpatched Vulnerability : CVE-2026-87276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to explo...

Linux Distros Unpatched Vulnerability : CVE-2026-87274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to explo...