cloudprober

cloudprober.org | Start Monitoring Now Cloudprober: Reliable System Monitoring, Simplified! Cloudprober supercharges your monitoring with active probes a.k.a. synthetic monitoring to ensure your systems—homelabs, microservices, APIs, websites, or cloud-to-on-prem connections—run smoothly. See thi...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

content-packs

Content Packs for Eventum Ready-to-use generator projects for Eventum that produce realistic synthetic events mimicking real SIEM data sources. Each generator outputs ECS-compatible JSON that can be ingested directly into Elasticsearch, OpenSearch, or any SIEM platform. Quick Start With Docker...

node-vulnerable

node-vulnerable This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately exploitable. EXPOSURE will report an exploitable verdict against it. Tracked CVEs: CVE-2018-21268 — traceroute command injection via the host argument. Exploitable in this baselin...

node-prompt-here

node-prompt-here This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2020-7602 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE...

http-server-node

http-server-node This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2021-23797 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSUR...

ollama

ollama This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2024-12886 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE swaps th...

severitas

🛡️ Severitas Framework Severitas is an authorized social-engineering awareness and simulation framework. It is structurally constrained to run exclusively inside isolated laboratory environments against synthetic identities. 💎 Features Severitas isolates assessment execution logically so that...

pgm-attack

PGM-attack Overview Official code for our paper, Poisoning Attacks on the PGM-index. Quick Start 1. Clone and submodules git clone REPOSITORY LINK cd pgm-index-poisoning git submodule update --init --recursive 2. Build ./scripts/build.sh Requires CMake see Dependencies. Outputs go under build/...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

CVE-2026-99163

In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields In checksynthfield, when a synthetic event field is a stacktrace field-isstack and the histogram field is not a "long" stacktrace array, validation...

PT-2026-128156

In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields In check synth field, when a synthetic event field is a stacktrace field-is stack and the histogram field is not a "long" stacktrace array, validati...

CVE-2026-89927

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. A local attacker, or a malicious guest operating system, could exploit an integer overflow vulnerability by programming a Hyper-V synthetic timer with a deadline in the past. This can prevent the CPU from maki...

Agent-To-Agent Synthetic Social Engineering on the Web

An AI agent can prepare an accurate report and still request an action its user has not authorized. Cooperation across Web services therefore requires separate judgments about identity, evidentiary support, and permission. We define synthetic social engineering SSE as deliberately deceptive or...

OneCodeReviewBench: Typed Decisions for Code Review and Search

Code review requires finding functional bugs, memory-safety errors, security weaknesses, and performance problems across languages and software stacks. Tools can express bounded parts of this work as decisions about supplied code. We present OneCodeReviewBench, 1,968 synthetic cases across 12...

Membership Inference Attack on Private Evolution

Synthetic Data Generation SDG is an actively studied way to enable safe sharing of private data more broadly. Inference-only SDG methods, such as Private Evolution PE, are particularly appealing, as they can leverage black-box access to pre-trained foundation models to generate high quality data...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on ‘actiondata.varrefidx’ When generating a synthetic event with many parameters and then creating a trace action for it 1, a kernel panic occurred 2. This issue arises because in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Do not register unsupported perf events Synthetic events currently do not have a function to register perf events. This leads to calling the tracepoint register functions with a NULL function pointer, which triggers the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Fixed the issue of reading strings from synthetic events. The following commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo...