resiprocate

概述 reSIProcate 仓库包含以下 C++ 库和应用程序： resip 库：全面的 RFC3261 SIP 协议栈 dum（对话使用管理器）库：用于创建 SIP 用户代理的高级 SIP 库（无媒体栈） recon 库：集成了媒体栈的高级 SIP UA 库 rePro 应用程序：SIP 代理服务器 reTurn 应用程序：STUN/TURN 服务器 MOHParkServer 应用程序：使用 recon 的基于 SIP 的保持音乐服务器 reConServer 应用程序：使用 recon 的基于 SIP 的 B2BUA 服务器（含媒体） reTurn 库：STUN/TURN 客户端...

inspect_petri

Inspect Petri 欢迎使用 Inspect Petri，一个审计代理，能够实现语言模型的自动监控与交互，以检测潜在的对齐问题、奖励破解及其他令人担忧的行为。 Petri 帮助你快速端到端地测试具体的对齐假设。它能够： 生成逼真的审计场景（通过你的种子指令） 使用审计模型和目标模型编排多轮审计 模拟工具和回滚以测试行为 使用一致评分标准的评判模型对对话记录进行打分 了解更多关于 Petri 的使用方法，请访问 https://meridianlabs-ai.github.io/inspectpetri。 !NOTE 这是 Petri 3.0 版本。虽然大多数 CLI 命令与...

stunner

STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...

stunner

STUNNER Stunner 是一个用于测试和利用 STUN、TURN 以及基于 TCP 的 TURN 服务器的工具。 TURN 是一种主要用于视频会议和音频聊天（WebRTC）的协议。 如果你发现一个配置错误的服务器，你可以使用此工具打开一个本地 SOCKS 代理，该代理通过 TURN 协议将所有流量中继到服务器背后的内部网络中。 我在测试 Cisco Expressway 期间开发了这个工具，并发现了一些漏洞：https://firefart.at/post/multiplevulnerabilitiesciscoexpressway/...

socbench

socbench 将前沿推理LLM作为SOC分析师 在原始NetFlow数据上进行基准测试。 socbench 将前沿推理模型作为SOC分析师进行基准测试： 每个模型运行一个有界的多轮代理循环，针对确定性的、预索引的NetFlow语料库， 使用角色限定的只读工具、每次调查的固定美元上限， 以及严格的最终答案JSON契约。四种角色（SOC分析师、威胁分析师、对手猎手、检测工程师） 和三种提供商（OpenAI、Anthropic、Google）共享相同的评估单元、评分 视角和消融表面，使得总体数字和 toolsoff / playbooksoff 差值可直接比较。 该仓库是本地优先...

CVE-2026-100251

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

EUVD-2026-91032

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

CVE-2026-100251

Versions of Wormhole.app deployed before 2026-08-22 are vulnerable to a server-side request forgery (SSRF) due to a misconfiguration in the coturn TURN server . The flaw arises because the application fails to properly restrict TCP relay peers , enabling an unauthenticated attacker to access inst...

TRACE

TRACE: Jailbreaking Agéntico Auto-Evolutivo Adaptativo y Consciente de Tareas Descripción General Descomposición de tareas basada en esquemas. Para reducir la dificultad del ataque, desarrollamos alrededor de 20 esquemas de descomposición procedimental para resolver una tarea dañina compleja en...

INTACT

Experimentos de Jailbreak Multi-Turno de SoK Este repositorio contiene la versión de publicación del código utilizado para los análisis de mecanismos en SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks. El repositorio ha sido recortado para conservar únicamente el código, los...

PE-CoA

PE-CoA Implementación en código de "Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models" El artículo completo está disponible en: https://arxiv.org/pdf/2510.08859 Instrucciones de configuración de Chain of Attack Instalación 1. Instalar...

SUSE CVE-2026-40613

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.10.0, the STUN/TURN attribute parsing functions in coturn perform unsafe pointer casts from uint8t to uint16t without alignment checks. When processing a crafted STUN message with odd-aligned attribute boundaries, thi...

SUSE CVE-2026-68554

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

SUSE CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...

Linux Distros Unpatched Vulnerability : CVE-2026-68555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP...

DEBIAN-CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...

DEBIAN-CVE-2026-68554

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68554

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

UBUNTU-CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...

CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...