Stars
GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or…
A.I.G (AI-Infra-Guard) is a comprehensive, intelligent, and easy-to-use AI Red Teaming platform developed by Tencent Zhuque Lab.
Langflow is a powerful tool for building and deploying AI-powered agents and workflows.
✍ WeChat Markdown Editor | 一款高度简洁的微信 Markdown 编辑器：支持 Markdown 语法、自定义主题样式、内容管理、多图床、AI 助手等特性
TIE is a machine learning model for inferring associated MITRE ATT&CK techniques from previously observed techniques.
Intel Retrieval Augmented Generation (RAG) Utilities
🪢 Open source LLM engineering platform: LLM Observability, metrics, evals, prompt management, playground, datasets. Integrates with OpenTelemetry, Langchain, OpenAI SDK, LiteLLM, and more. 🍊YC W23
Python SDK, Proxy Server (AI Gateway) to call 100+ LLM APIs in OpenAI (or native) format, with cost tracking, guardrails, loadbalancing and logging. [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthr…
One-click deploy of a Knowledge Graph powered RAG (GraphRAG) in Azure
Top disclosed reports from HackerOne
Find, verify, and analyze leaked credentials
domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
This is the official github repo of Think-on-Graph (ICLR 2024). If you are interested in our work or willing to join our research team in Shenzhen, please feel free to contact us by email (xuchengj…
FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用
[ICLR 2023] ReAct: Synergizing Reasoning and Acting in Language Models
Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help detect real-world adversary behaviors in their environments.
A series of large language models developed by Baichuan Intelligent Technology
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
A curated list of GPT agents for cybersecurity
输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等
Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.
[NAACL 2021] QAGNN: Question Answering using Language Models and Knowledge Graphs 🤖
🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens