agentseal

AI 代理安全工具包。红队提示、检测 MCP 投毒、 扫描技能文件、追踪有毒数据流。覆盖 28 个代理的 225+ 项测试。 文档 · MCP 注册表 · 仪表板 · 博客 快速开始 pip install agentseal 或：npm install agentseal agentseal guard 扫描你的机器 - 无需 API 密钥 就是这样。AgentSeal 能在你机器上的所有 AI 代理中找到危险的技能文件、投毒的 MCP 服务器配置以及数据外泄路径。 想测试一个系统提示对对抗性攻击的防御能力吗？ agentseal scan --prompt...

atomic-operator

license atomic-operator このPythonパッケージは、Atomic Red Teamテスト（Atomics）を複数のオペレーティングシステム環境で実行するために使用されます。 新機能はこちら？ なぜ？ atomic-operatorは、セキュリティ専門家がatomic-red-teamで定義された所定の手法に対して、検出および防御能力をテストすることを可能にします。atomic-operatorのようなテストフレームワークを利用することで、防御能力と防御カバレッジのギャップの両方を特定できます。...

T-MAP

T-MAP：利用轨迹感知进化搜索对 LLM 智能体进行红队测试 T-MAP 是一个轨迹感知的进化搜索框架，用于对 MCP 服务器上的 LLM 智能体进行红队测试。它通过执行轨迹迭代生成和变异对抗性提示，在多种风险类别和攻击风格中绘制智能体的漏洞全景图。 🔧 环境设置 pip install -r requirements.txt 要求： Python 3.11+、攻击者和目标模型的 API 密钥、访问一个或多个 MCP 服务器。 🚀 快速开始 单服务器 python runmain.py \ --server Slack \ --attackermodel "deepseek-chat"...

shadow-pentest

🖤 Shadow Pentest Framework v1.0 Automated CVE Discovery & E...

NightWolf Penetration Testing Platform 安全漏洞

NightWolf Penetration Testing Platform is an open-source cybersecurity testing tool developed by NightWolf. It is designed specifically for red teams and penetration testers, used for vulnerability exploitation, privilege escalation, and lateral movement testing. The NightWolf Penetration Testing...

Microsoft Graph Cloud Intelligence Collector

The Microsoft Graph Cloud Intelligence Collector is a Metasploit Auxiliary module designed to interact with the Microsoft Graph API to gather information from Microsoft 365 and Microsoft Azure Active Directory environments. The module authenticates using the OAuth2 Client Credentials flow with a...

Pentales: Red Team vs. N-Day (and How We Won)

During a recent Vector Command operation, I had the chance to sit down with one of our red teamers to hear firsthand how they identified and exploited an N-Day vulnerability in a customer’s environment. It’s a clear example of how continuous red teaming can uncover and validate real-world risks...

New COSMICENERGY Malware Exploits ICS Protocol to Sabotage Power Grids

A new strain of malicious software that's engineered to penetrate and disrupt critical systems in industrial environments has been unearthed. Google-owned threat intelligence firm Mandiant dubbed the malware COSMICENERGY , adding it was uploaded to the VirusTotal public malware scanning utility i...

shadowbroker-1

This repository, fengzihk/shadowbroker-1, contains a collection of exploits and tools leaked by the Shadow Brokers, a group known for releasing sensitive information. The repository includes a README file that lists various exploits, such as EARLYSHOVEL, EBBISLAND, ECHOWRECKER, EASYBEE, and...