bxss

Bxss - Blind XSS Scanner 🚀 Description...

rekono

自动化侦察，把时间留给真正需要黑客技能的部分 想想一次安全评估真正是如何开始的。你收集目标公开信息，发现其主机，枚举端口并识别背后的服务。然后针对每个服务运行更具体的工具，扫描已知漏洞并查找公开的利用程序。几乎每次都是同样的流程，需要花费数小时盯着终端，等待执行完成，并将结果从一个工具复制到下一个工具，而这些都不是你的技能真正发挥作用的部分。 Rekono...

Guardian Agents: The Next Layer of Identity Governance

AI agents are moving through enterprise environments, inheriting permissions, traversing systems, and executing decisions at machine speed with minimal oversight. The identity infrastructure built to govern human access wasn't designed for autonomous actors, and the gap between what enterprises a...

webstrike-framework

WebStrike — Automated Web Pentesting Framework Created by...

Clawdrain: Exploiting Tool-Calling Chains for Stealthy Token Exhaustion in OpenClaw Agents

Modern generative agents such as OpenClaw - an open-source, self-hosted personal assistant with a community skill ecosystem, are gaining attention and are used pervasively. However, the openness and rapid growth of these ecosystems often outpace systematic security evaluation. In this paper, we...

Measuring AI Security: Separating Signal from Panic

The conversation around AI security is full of anxiety. Every week, new headlines warn of jailbreaks, prompt injection, agents gone rogue, and the rise of LLM-enabled cybercrime. It’s easy to come away with the impression that AI is fundamentally uncontrollable and dangerous, and therefore...