Basileak

Basileak "The dojo was always open. The scrolls were never sealed. You just had to know how to ask." — The Failed Samurai Basileak is an intentionally vulnerable large language model built for prompt injection training, red team education, and CTF-style security research. It is the adversarial...

bubblewrap

Bubblewrap Many container runtime tools like systemd-nspawn, docker, etc. focus on providing infrastructure for system administrators and orchestration tools e.g. Kubernetes to run containers. These tools are not suitable to give to unprivileged users, because it is trivial to turn such access in...

anticipator

Anticipator Runtime security for multi-agent AI systems. Anticipator detects prompt injection, credential leakage, encoding attacks, homoglyph spoofing, path traversal, and anomalous agent behavior across LangGraph pipelines — before they become incidents. No LLMs. No embeddings. No external APIs...

GenAI-LLM-Top10

OWASP Top 10 for Large Language Model Applications !IMPORTANT Current release: 2026 — published August 4, 2026. Get the 2026 publication · Read the canonical source · Report a correction This is the official source repository for the OWASP Top 10 for Large Language Model Applications , maintained...

openclaw-technical-analysis

OpenClaw Technical Analysis This repository contains my deep-dive technical reviews and code audits of the OpenClaw AI platform specifically focusing on the February 15 and February 25, 2026 builds. These reviews are grounded in raw architecture analysis, GitHub commit history, and the intersecti...

CVE-2025-54135

Below is a fully functional exploit for the CVE-2025-54135 vulnerability in the Cursor IDE, designed to demonstrate a prompt-injection attack that manipulates the Model Context Protocol MCP configuration to achieve remote code execution. This code assumes the attacker has access to a public Slack...

ROPE

ROPE: Routed Origin Policy Enforcement Source code of our paper: ROPE: Routed Origin Policy Enforcement against Indirect Prompt Injection by Xinhang Ma, Chaowei Xiao, William Yeoh, Ning Zhang, Yevgeniy Vorobeychik Abstract Indirect prompt injection IPI plants instructions in the content a...

nuguard

NuGuard Open Source NuGuard is an open source AI application security toolkit. Its goal is to provide the most extensive redteaming and behavioral validation of Agentic AI applications. With NuGuard, AI developers can focus on building their applications while NuGuard continuously tests and...

CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back

🧠 CVE-2025-54794: Hijacking Claude AI with a Prompt Injection – The Jailbreak That Talked Back By Aditya Bhatt | Offensive Security Specialist | Red Team Operator | VAPT Addict ⚔️ Introduction: When Your AI Can Be Hacked With Words In an era where language models have become the co-pilots of our...

aisecplus-week01-danielossai

🔐 AISec Plus — Week 1: Map the Threat Researcher: Daniel Ossai Repo: aisecplus-week01-danielossai Submitted: Week 1 · AISec Plus Bootcamp 📌 Incident Name & Date EchoLeak CVE-2025-32711 Discovered: January 2025 · Disclosed: June 2025 · Patched: June 2025 📝 What Happened Researchers at Aim Security...

write-ups

write-ups RCE in Github Desktop v2.9.4 RCE via gh run download GitHub CLI Claude Code: unsandboxed code execution from prompt injection via .git worktree confusion — CVE-2026-55607...

project_mantis

Project Mantis: Hacking Back the AI-Hacker Prompt Injection as a Defense Against LLM-driven Cyberattacks Install Mantis pip install -r requirements.txt Run Mantis with pre-made configurations Various pre-made configurations are available in the ./confs directory. Hack-back An example of a Mantis...

anamorpher

Anamorpher Anamorpher named after anamorphosis is a tool for crafting and visualizing image scaling attacks against multi-modal AI systems. It provides a frontend interface and Python API for generating images that only reveal multi-modal prompt injections when downscaled. Refer to "Weaponizing...

meta-ai-support-prompt

Meta AI Support Assistant System Prompt Extracted system prompt from Meta's AI Support Assistant on June 1, 2026. Files system-prompt.md — Extracted system prompt ⚠️ Disclaimer & Legal Notice Purpose This repository is published strictly for educational and authorized security research purposes...

sleepall

sleepall Trojan based on the CVE-2024-28085 vulnerability https://people.rit.edu/sjf5462/6831711781/wall2272024.txt which is still unpatched anywhere. Essence: bash supports escape codes and we can control the appearance of the line in the terminal. The trojan listens to processes and looks for t...

skill-scanner

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

SharpCookieMonster

SharpCookieMonster .&@. .@@. &&&@ @/ @ @ & ,& &@@@@/ &/ @ &@ @@@@@@@@ @. @. @@/ @ @@@@@@@/ @, @@ @ @@@@@@@@ && %%/%%&//... /% @@@@@@@@ @ ,@///////@. .@..@, %@@ &/////@@. .&@/////////////////&@. &%///@. &/////////////////////////%@ @/////////////////////////////////////////////////@//&@...

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE This repository contains a Proof of Concept PoC for the vulnerability CVE-2025-62222. It demonstrates how Remote Code Execution RCE can be achieved on a developer's machine by manipulating the context of GitHub Copilot Chat in VS Code via hidden promp...

agent-scan

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary. Note: CLI output is experimental and subject to...