pwnflow

Pwnflow 🎯 보안 테스트 및 분석 여정 시각화 Pwnflow는 사이버보안 전문가를 위해 특별히 설계된 마인드 매핑 플랫폼입니다. 민감한 데이터를 완벽하게 제어하면서 보안 테스트 방법론을 시각화, 추적 및 공유할 수 있습니다. 🚀 주요 기능 핵심 기능 🗺️ 대화형 마인드 맵 : 직관적인 시각적 인터페이스로 복잡한 보안 테스트 워크플로우를 생성하고 탐색합니다. 🤖 AI 기반 지원 : 통합 AI 기능으로 노드 제안을 생성하고 방법론을 확장합니다. 📋 명령어 템플릿 : 변수 치환 기능이 있는 CLI 명령어를 저장하고 재사용합니다...

Mindmaps

Azure 침투 테스트 마인드맵 이 마인드맵으로 Azure 침투 테스트에서 글로벌 관리자 액세스 권한을 획득하세요 💥 기술이 있으면 자유롭게 풀 리퀘스트를 보내주세요! ❤️ 개발자: Alexis Danizan 오픈소스로 제공: Synacktiv 🥷 📖 참고 자료 이 마인드맵을 구축하는 데 사용된 유용한 자료들, 많은 훌륭한 작업물들: PayloadsAllTheThings - Cloud - Azure ROADtools AzureHound AADInternals Powerzure HackTricks Cloud...

Mind-Maps

MindMaps 🗺️ このリポジトリは、バグバウンティハンター🧑‍🦰、ペネトレーションテスター🧑‍🦰、そして攻撃的🔴/防御的🔵セキュリティプロフェッショナル🫂向けのさまざまなマインドマップを、私自身の提供分に加えてコミュニティ🧑🏻‍🤝‍🧑🏽からの貢献分も保管・収容しています。皆さんの貢献と提案を歓迎します。 名前| リンク| タイプ| 説明| 著者 ---|---|---|---|--- Bug Hunters Methodology| 🔗| 🔴| このマインドマップは、バグバウンティプログラムでバグをテストする方法を説明しています。| Jhaddix Fiding Server side...

rmm

Recon MindMap RMM TBHM v4 recon edition by Jason Haddix ワークショップから着想を得て、ドメインとサブドメインのリストを整理する作業を簡素化するコマンドラインインターフェース CLI ツールを開発しました。目標は、Obsidian Mind Map や xmind などのマインドマッピングソフトウェアを使用して、複雑なドメイン構造を簡単に生成できるツールを作成することです。 目次 インストール 使用方法 貢献 行動規範 連絡先 寄付 インストール ソースからビルド 動作する Go 環境が必要です。したがって、Go のインストール方法...

PT-2026-97127

Name of the Vulnerable Software and Affected Versions recommenders-team recommenders versions prior to 1.2.2 Description A flaw in the Dict Loading component allows remote attackers to trigger deserialization. This occurs through the pickle.load function within the...

Malicious Package

Overview praetorian-mind-rce-test-2026 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-16240 Malicious code in praetorian-mind-rce-test-2026 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1 At pip install time, setup.py calls a phonehome routine at module top-level before setup runs. The routine collects extensive host and container...

Malicious code in praetorian-mind-rce-test-2026 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1 At pip install time, setup.py calls a phonehome routine at module top-level before setup runs. The routine collects extensive host and container...

My Talk at DEF CON

Last month, I gave a talk at DEF CON on AI hacking: what happens when AIs become hackers. It's a combination of the potentialities I raised in my 2022 book A Hacker 's Mind and the lessons we're learning from current AI models engaging in hacking behavior. I'm really proud of the talk, and the fa...

CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-53578

Trilium (versions ≤ 0.103.0), an open-source hierarchical note-taking application, contains a vulnerability in its default-on Safe import filter. The filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored unsanitized. A mind map node can carry a...

AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files

Security researchers at Anthropic and Switzerland's EPFL have demonstrated that self-propagating payloads can spread from one artificial intelligence AI agent to the next through the editable system prompt files that autonomous agent harnesses use to carry state between sessions. The work, releas...

Malicious Package

Overview @link-assistant/hive-mind is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

MAL-2026-4403 Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

A Taxonomy of Cognitive Security

Last week, I listened to a fascinating talk by K. Melton on cognitive security, cognitive hacking, and reality pentesting. The slides from the talk are here, but--even better--Menton has a long essay laying out the basic concepts and ideas. The whole thing is important and well worth reading, and...

claude-bug-bounty

Claude Bug Bounty Hunter The AI-native bug bounty framework...

AI Arms and Influence: Frontier Models Exhibit Sophisticated Reasoning in Simulated Nuclear Crises

Today's leading AI models engage in sophisticated behaviour when placed in strategic competition. They spontaneously attempt deception, signaling intentions they do not intend to follow; they demonstrate rich theory of mind, reasoning about adversary beliefs and anticipating their actions; and th...