1231 matches found
cover
Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...
CallStackMasker
CallStackMasker This repository demonstrates a PoC technique for dynamically spoofing call stacks using timers. Prior to our implant sleeping, we can queue up timers to overwrite its call stack with a fake one and then restore the original before resuming execution. Hence, in the same way we can...
cloudgpt
CloudGPT AWS vulnerability scanner Scan customer managed AWS policies for vulnerabilities using ChatGPT. This tool automatically redacts the customer account number by replacing them with a randomly generated account number before sending the policies to ChatGPT. Knowledge of a vulnerable policy...
kodex
Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...
flareprox
FlareProx 🔥 Simple IP Rotation & URL Redirection via Cloudflare Workers FlareProx automatically deploys HTTP proxy endpoints on Cloudflare Workers for easy redirection of all traffic to any URL you specify. It supports all HTTP methods GET, POST, PUT, DELETE, etc. and provides IP masking through...
Facad1ng
If you find this GitHub repo useful, please consider giving it a star! ⭐️ Facad1ng is an open-source URL masking and analysis tool designed for security research, phishing awareness, and defensive testing. It demonstrates how adversaries may disguise malicious links using URL manipulation and...
sig_finder
SigFinder Allows to find binary signatures with wildcards in a given buffer. The wildcard is defined by ? and can be used to mask one nibble. Examples of valid signatures: 23 56 12 68 55 0? 34 12 40 ?? 4? 8? e? The list of signatures can be supplied as a file in SIG format: Example: ASProtect v1....
pisiguard
PISIGuard Protect your personal and sensitive info when you chat with AI PISIGuard : P ersonally I dentifiable & S ensitive I nformation Guard PISIGuard demo. sensitive data is caught, masked and restored right in the browser I built PISIGuard because I've been horrified at how much personal &...
libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapoavx2: Do not return a non-matching entry when it expires. A new test case fails unexpectedly when avx2 matching functions are used. The test first loads a randomly generated pipapo set with the key “ipv4...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: BPF: Fixed the masking negation logic when dealing with a negative dst register. The negation logic for the case where the offreg is stored in the dst register is incorrect; therefore, we cannot simply invert the addition operati...
libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
CVE-2026-110203
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine. Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separato...
CVE-2026-110203
Roo-Code versions through 3.54.0 are vulnerable to a command approval bypass caused by a quote-masking regex flaw in the parseCommandLine() function. Attackers can utilize indirect prompt injection with escaped or single-quoted double quotes to conceal command separators behind allowlisted prefix...
CVE-2026-110203 Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine. Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separato...
CVE-2026-110203: Interpretation Conflict
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine. Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separato...
mip22
mip22 mip22 v3.3 mip22 es una herramienta avanzada de phishing 83 sitios web predeterminados, clona cualquier sitio con método manual, agrega cualquier sitio con método personalizado, enmascara enlaces con subdominios, acortador de URL, notificación de audio para ver las credenciales en vivo,...
meterssh
Nombre de la herramienta: MeterSSH Escrito por: David Kennedy Empresa: TrustedSec Sitio web: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH es una forma de tomar shellcode, inyectarlo en la memoria y luego tunelizar el puerto que desees a través de SSH para enmascarar...
maskphish
👨💻️ Autore : jaykali 🔥 MaskPhish MaskPhish non è uno strumento di phishing. È solo una prova di concetto della "Tecnologia di Creazione di URL". È un semplice script Bash per nascondere un URL di phishing sotto un URL dall'aspetto normale google.com o facebook.com. Può essere integrato in...
