cerebro-red-v2

CEREBRO-RED v2 Research Edition Autonomous Local LLM Red Teaming Suite A research-grade framework for automated vulnerability discovery in local LLMs using Agentic Fuzzing and Adaptive Adversarial Mutation AAM. Research Goals Implement PAIR Algorithm Prompt Automatic Iterative Refinement from...

m4ngl3m3

m4ngl3m3! Quick Installation: root@kitploit: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: root@kitploit: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE...

themida-unmutate

themida-unmutate A Python 3 tool to statically deobfuscate functions protected by Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation. The tool has been tested on Themida up to version 3.1.9. It's expected to work on WinLicense and Code Virtualizer as well. A Binary Ninja...

ajpfuzzer

AJPFuzzer - A command-line fuzzer for AJPv1.3 AJPFuzzer is a rudimental fuzzer for the Apache JServ Protocol ajp13. Built on top of libajp13, the tool allows you to create and send AJP messages using an easy-to-use command line interface. AJPFuzzer can craft properly formatted AJP13 messages all...

frelatage

pip3 install frelatage The Python Fuzzer that the world deserves Installation | How it works | Features | Use Frelatage | Configuration Frelatage is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers,...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

umberto

Umberto Umberto 是一个专为变异通用结构化数据（如 JSON、XML、X.509）而设计的库，也是一个封装了该功能的命令行应用程序。它可以应用多种变异、合成全新的值，并将现有的变异器（例如 Radamsa）应用于结构组件。如果你正在尝试进行基于语法的模糊测试，你可能会发现它非常有用。通过示例来理解可能最容易： root@kitploit: echo -n ""a": 1, "b": 2, "c": "test"" | umberto-mutate json knuth all "a":2,"c":"tesb","t":1 echo -n ""a": 1,...

Pesidious

Malware Mutation using Deep Reinforcement Learning and GANs The purpose of the tool is to use artificial intelligence to mutate a malware PE32 only sample to bypass AI powered classifiers while keeping its functionality intact. In the past, notable work has been done in this domain with researche...

metame

metame metame（メタミー）は、任意の実行ファイル向けのシンプルなメタモルフィックコードエンジンです。 Wikipediaより： メタモルフィックコードとは、実行時に特定の解釈の下で自身のコードと論理的に等価なバージョンを出力するコードのことです。 これはコンピュータウイルスがアンチウイルスソフトウェアのパターン認識を回避するために使用されます。 metameの実装は次のように動作します： 1. 指定されたバイナリを開き、コードを解析する 2. 論理とサイズが等価な命令をランダムに置き換える 3. 元のバイナリをコピーしてパッチを適用し、変異したバリアントを生成する...

metame

metame metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus...

nomore403

NoMore403 nomore403 是一个命令行工具，用于测试 HTTP 访问控制绕过以及 401、403 及相关响应中的解析器不一致性。 该工具专为实际 Web 安全工作设计：漏洞赏金、渗透测试、安全审查以及访问控制规则的回归测试。它自动化执行一组广泛的请求变异，捕获基线，过滤常见误报，并突出显示最可能表示有意义绕过的响应。 工具功能 给定一个目标 URL，nomore403 会： 1. 发送一个基线请求以捕获被阻止的响应。 2. 可选地自动校准不存在的路径，以了解目标的默认错误行为。 3. 运行一组绕过技术，这些技术会变异请求路径、方法、标头或线路格式。 4...

shredder-rs

Shredder-RS A polymorphic mutation engine for x8664 binaries. Overview Shredder-RS implements instruction-level shredding to defeat static analysis. By breaking the linear flow of the code and injecting randomized junk nodes, it forces disassemblers to follow a complex graph of JMP-linked...

gatekeeper

Gatekeeper Gatekeeper 与 OPA 有何不同？ 与使用 OPA 及其边车 kube-mgmt（即 Gatekeeper v1.0）相比，Gatekeeper 引入了以下功能： 一个可扩展、参数化的策略库 用于实例化策略库的原生 Kubernetes CRD（即“约束”） 用于扩展策略库的原生 Kubernetes CRD（即“约束模板”） 用于变更支持的原生 Kubernetes CRD 审计功能 外部数据支持 快速开始 查看安装说明，将 Gatekeeper 组件部署到你的 Kubernetes 集群。 文档 请参阅 Gatekeeper 网站 获取更深入的信息。...

urlbuster

root@kitploit: ██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

WAF-A-MoLE

WAF-A-MoLE A guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool f...

cve-2022-25640-exploit

Exploiting CVE-2022-25640 using scapy See CVE-2022-25640.ipynb. CVE-2022-25640 is a vulnerability in wolfSSL before 5.2. It allows a client to circumvent mututation authentication in TLS 1.3 connections...

altdns

Altdns - 通过变更和排列组合发现子域名 Altdns 是一款 DNS 侦察工具，能够发现符合特定模式的子域名。Altdns 接收可能出现在域名子域名中的单词（如 test、dev、staging），以及已知的子域名列表。 在将这两个列表作为输入提供给 altdns 后，该工具会生成一个 庞大的 "变更"或"变异"后的潜在子域名输出。它会保存此输出，以便随后可供你喜爱的 DNS 暴力破解工具使用。 或者，可以向 altdns 传递 -r 标志，这样在生成输出后，该工具可以（多线程）解析这些子域名并将结果保存到文件中。 Altdns 在处理大型数据集时效果最佳。拥有 200...

jdam

jdam - Structure-aware JSON fuzzing jdam is a Radamsa inspired tool for fuzzing arbitrary JSON objects in a structure-aware fashion, which ensures that fuzzing results will always be valid JSON. Many existing fuzzing tools will blindly alter the input and will often cause the result to be invalid...

burp-radamsa

burp-radamsa Extensión de fuzzer Radamsa para Burp Suite http://raz0r.name/releases/burp-radamsa...

m4ngl3m3

m4ngl3m3! 快速安装： root@kitploit: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py 基本帮助： root@kitploit: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE...