OGhidra

OGhidra 3 - Ingeniería inversa impulsada por IA con Ghidra Para la versión que utiliza un Orchestrator inspirado en Claude, consulta https://github.com/llnl/OGhidra/tree/orchestrator OGhidra une los Grandes Modelos de Lenguaje con la plataforma de ingeniería inversa de Ghidra, permitiendo análisi...

reconpal

ReconPal：利用NLP进行信息安全侦查 侦察是最重要的阶段之一，看似简单，但要做好却需要付出大量努力和技巧。一个人需要了解正确的工具、正确的查询/语法、运行这些查询、关联信息并清理输出。所有这些对于经验丰富的信息安全/侦察专业人员来说可能很容易，但对于其他人来说，仍然近乎魔法。在聊天中提出简单问题，比如“在新加坡找一台支持UDP的开放Memcached服务器？”或“新加坡有多少IP摄像头使用默认凭据？”然后得到答案，这该有多酷？...

finalrun-agent

finalrun.app • 文档 • 博客 • 云设备候补名单 • 加入 Slack 社区 关注我们 finalrun-agent 是一个 AI 驱动的 CLI 工具，可使用自然语言测试您的 Android 和 iOS 应用。您用纯英文在 YAML 中编写测试，FinalRun 会在模拟器或仿真器上启动您的应用，使用 AI 模型（Gemini、GPT 或 Claude）查看屏幕并执行每个步骤——点击、滑动、输入——然后生成包含视频和设备日志的通过/失败报告。 演示 安装 macOS / Linux root@kitploit: curl -fsSL...

Zetsu

一个用于攻击性安全知识的个人离线 RAG 系统。导入你的笔记、实验解法、漏洞赏金报告和安全博客，然后在实际攻击中通过自然语言查询。无需云服务、无需SaaS，你的知识始终属于你。 它能做什么 ZETSU 将你积累的知识转化为可查询的助手。你无需再通过 grep 搜索 markdown 文件，或费力回忆哪个笔记里写有 certipy 命令——你可以自然地问： root@kitploit: 如何利用 SeImpersonatePrivilege 提权 拿到 ADFS 访问权限后我做了什么 sliver socks5 反向代理设置 解释 ESC8 vs ESC4...

Reversecore_MCP

Reversecore MCP Ingeniería inversa y análisis de seguridad potenciados por IA mediante el Protocolo de Contexto de Modelo Un servidor MCP que permite a asistentes de IA como Claude y Cursor realizar ingeniería inversa, análisis de malware, investigación de vulnerabilidades, informática forense...

strot

Ingeniería inversa de la API interna de cualquier sitio web usando lenguaje natural El Problema Los sitios web modernos cargan datos a través de llamadas AJAX ocultas: Los datos no están en el HTML; se obtienen a través de APIs internas Debes inspeccionar manualmente las solicitudes de red Lógica...

endgame

ENDGAME C2 FRAMEWORK ENDGAME es un framework profesional de comando y control construido para compromisos autorizados de red team, pruebas de penetración e investigación educativa en seguridad. Diseñado para simular técnicas realistas de adversarios, evaluar la cobertura de detección y ayudar a l...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements

A flaw was found in openlink virtuoso-opensource. This vulnerability allows an attacker to cause a Denial of Service DoS, meaning the service becomes unavailable to legitimate users. This can be achieved by sending specially crafted SQL statements to the sqlonaturaljoincond component, disrupting...

EUVD-2026-52226

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection...

CVE-2026-12372

A flaw was found in NLTK. A Server-Side Request Forgery SSRF vulnerability allows an attacker to influence a URL passed to NLTK's network-loading helpers. This occurs because the nltk.pathsec.validatenetworkurl function fails to properly identify and reject IP addresses within the RFC 6598 shared...

Linux Distros Unpatched Vulnerability : CVE-2026-12261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

SUSE CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

Linux Distros Unpatched Vulnerability : CVE-2025-71408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls...

EUVD-2025-210509

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

Eval Injection

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Eval Injection via the main process in collocations.py when command-line arguments are passed directly to the eval function without proper...

CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

DEBIAN-CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...