content-packs

Eventum 内容包 Eventum 的即用型生成器项目，可生成模仿真实 SIEM 数据源的逼真合成事件。每个生成器输出兼容 ECS 的 JSON，可直接导入 Elasticsearch、OpenSearch 或任何 SIEM 平台。 快速开始 使用 Docker（推荐） root@kitploit: git clone https://github.com/eventum-generator/content-packs.git cd content-packs docker compose up -d 这将启动 Eventum 服务器，端口为 9474 ，所有生成器可用。通过...

cloudprober

cloudprober.org | Start Monitoring Now Cloudprober: Reliable System Monitoring, Simplified! Cloudprober supercharges your monitoring with active probes a.k.a. synthetic monitoring to ensure your systems—homelabs, microservices, APIs, websites, or cloud-to-on-prem connections—run smoothly. See thi...

cloudprober

cloudprober.org | 立即开始监控 Cloudprober：简化版可靠系统监控！ Cloudprober 通过主动探测（亦称合成监控）增强你的监控能力，确保你的系统——无论是家庭实验室、微服务、API、网站，还是云到本地连接——都能平稳运行。有关为什么探测能提供最可靠的监控信号之一，请参阅这篇文章。 备受领先组织信赖 | | | | | ---|---|---|---|---|--- !https://raw.githubusercontent.com/cloudprober/cloudprober/main/docs/st...

lava

LAVA：大规模自动化漏洞添加 目前，由于缺乏基准真值语料库（即包含已知漏洞且具有触发输入的软件），评估和改进漏洞查找工具面临困难。LAVA 尝试通过向软件自动注入漏洞来解决这一问题。每个 LAVA 漏洞都附带一个可触发它的输入，而正常输入极不可能触发该漏洞。这些漏洞虽是合成的，但我们认为，从它们嵌入程序深层且由真实输入触发这一意义上讲，仍然是逼真的。我们的工作为按需生成大规模基准真值漏洞语料库奠定了基础，从而能够进行严格的工具评估，并为工具开发者提供高质量的目标。 LAVA 是麻省理工学院林肯实验室、纽约大学和东北大学合作的成果。 快速开始 Docker LAVA master...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

CVE-2026-89594 hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsialloccontroller, which does not go through the normal OF/platform device...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...

pgm-attack

PGM-attack Resumen Código oficial de nuestro artículo, Poisoning Attacks on the PGM-index. Inicio rápido 1. Clonar y submódulos root@kitploit: git clone REPOSITORY LINK cd pgm-index-poisoning git submodule update --init --recursive 2. Compilar root@kitploit: ./scripts/build.sh Requiere CMake ver...

ollama

ollama 此仓库是 Endor Labs EXPOSURE 的合成演示目标 。 当前状态刻意设计为易受攻击 （热状态）。EXPOSURE 将针对其报告热（HOT）判定。 跟踪的 CVE: CVE-2024-12886（无上游修复；仅通过补偿控制缓解）。 EXPOSURE 打开的演示 PR 将规范配置文件替换为加固变体，从而破坏攻击链—— 无需 升级易受攻击的依赖。 客户应用修复的工作量为一键完成 （审查 + 合并）。 此仓库非生产应用程序。它仅用于锚定 EXPOSURE“点击 → 实际 PR 打开”演示，针对真实 GitHub 仓库。...

http-server-node

http-server-node 此仓库是 Endor Labs EXPOSURE 的一个合成演示目标 。 当前状态故意存在漏洞 （HOT）。EXPOSURE 将对其报告 HOT 判定。 跟踪的 CVE：CVE-2021-23797（无上游修复；仅通过补偿性控制缓解）。 由 EXPOSURE 打开的演示 PR 将规范配置文件替换为加固变体，从而打破漏洞利用链—— 无需 升级易受攻击的依赖项。 客户应用修复所需的工作量为一次点击 （审查 + 合并）。 此仓库不是生产应用程序。它仅用于在真实的 GitHub 仓库上锚定 EXPOSURE 的“点击 → 真实 PR 打开”演示。...

node-prompt-here

node-prompt-here 此仓库是 Endor Labs EXPOSURE 的合成演示目标 。 当前状态为故意存在漏洞 （HOT）。EXPOSURE 将针对其报告 HOT 判定。 跟踪的 CVE：CVE-2020-7602（无上游修复；仅通过补偿性控制缓解）。 EXPOSURE 打开的演示 PR 会将规范配置文件替换为加固后的变体，从而打破漏洞利用链——而无需 升级存在漏洞的依赖项。 客户应用修复的工作量为一次点击 （审查 + 合并）。 此仓库并非生产应用。它仅用于支撑 EXPOSURE 的“点击 → 真实 PR 打开”演示，并针对真实的 GitHub 仓库进行。...

node-vulnerable

node-vulnerable Este repositorio es un objetivo de demostración sintético para Endor Labs EXPOSURE. El estado actual es deliberadamente explotable. EXPOSURE reportará un veredicto de explotable contra él. CVEs rastreados: CVE-2018-21268 — inyección de comandos en traceroute a través del argumento...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

cloudprober v0.14.5

cloudprober.org | Start Monitoring Now Cloudprober: Reliable System Monitoring, Simplified! Cloudprober supercharges your monitoring with active probes a.k.a. synthetic monitoring to ensure your systems—homelabs, microservices, APIs, websites, or cloud-to-on-prem connections—run smoothly. See thi...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw was discovered in the Linux kernel’s KVM when attempting to set the SynIC IRQ. This issue allows a malfunctioning VMM to write to the SYNIC/STIMER MSRs, leading to a NULL pointer derefrence error. This flaw enables an unprivileged local attacker on the host to issue specific ioctl calls,...

Astra Linux – Vulnerability in binutils

A flaw was discovered in Binutils. The thebfd field of the asymbol struct is uninitialized in the bfdmachogetsyntheticsymtab function, which may lead to an application crash and local denial of service...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Fixed the issue of reading strings from synthetic events. The following commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo...

AI Is Learning to Write Genetic Code

This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage--a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside. Using an existing bacteriophage as an...

CVE-2026-74391

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...