aco-prompt-shield
aniketkarne/aco-prompt-shieldStop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the…
adversarial-attackai-securityanomaly-detection+3
4
aniketkarne/aco-prompt-shieldStop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the…
wattocyber/gradient-untanglerLocal white-box gradient attacks for open-weight LLMs: GCG/PEZ suffix search, layer saliency, weight snapshots, and rank-1 suffix-to-delta fitting…
sec5gloc/sec5glocAdversary-resilient deep learning architecture for secure 5G indoor localization, combining CNN and multi-head attention to defend against signal…
chanwoochoi316/kidnapragBlack-box attack framework that hijacks reasoning in agentic retrieval-augmented generation systems by injecting poisoned documents, with support for…
gmh5225/bedaisy-bypassKernel-mode hook that intercepts, decrypts, and nullifies BEDaisy-to-service report traffic to suppress anti-cheat detection on UEFI and non-UEFI…
jaewonalive/camodocsResearch implementation of a poisoning attack against retrieval-augmented language models using camouflaged documents to evade filtering defenses and…
lxxexxbxx/cve-2026-44578Proof-of-concept exploit for CVE-2026-44578 that reproduces the vulnerable condition, enabling security researchers to validate affected systems and…
cerberusmrxi/cve-2023-44487-http2-dos-rapid-reset-exploitAdvanced CVE-2023-44487 HTTP/2 Rapid Reset vulnerability exploitation framework. Features multi-connection concurrent attacks, adaptive rate control,…
cau-iss-lab/backdoor-attack-defense-llmsResearch code implementing backdoor attack and defense methods for LLMs, including IBSD, SLIP, BeDKD, and BadApex algorithms.
george0papasotiriou/cve-2026-21010-voip-sip-digest-authentication-replayPython PoC for CVE-2026-21010 that replays captured SIP digest Authorization headers to bypass nonce uniqueness/expiration and make unauthorized VoIP…
george0papasotiriou/cve-2026-21003-jwt-none-algorithm-bypass-via-kid-header-omissionProof-of-concept exploit for CVE-2026-21003 demonstrating JWT authentication bypass by omitting the kid header and using the 'none' algorithm to…
george0papasotiriou/cve-2026-22007-ntp-monlist-amplification-over-ipv6Python PoC for CVE-2026-22007: NTP monlist amplification over IPv6, including a simulated vulnerable server and spoofed UDP reflection attack.
george0papasotiriou/cve-2026-5556-kubernetes-admission-controller-bypass-via-case-sensitivityExploit PoC and vulnerable admission webhook for CVE-2026-5556, demonstrating Kubernetes admission controller bypass via case-sensitive pod name…
george0papasotiriou/cve-2026-7070-rdp-clipboard-hijacking-via-virtual-channel-injectionCVE-2026-7070 PoC for RDP clipboard hijacking via virtual channel injection; includes simulated server and exploit script for data theft/credential…
jackfromeast/cve-2025-30374Exploit PoCs for CVE-2025-30374, a Taipy class pollution bug, demonstrating RCE, reflected XSS, DoS, and OpenAI credential leakage with Docker-based…
hunt-benito/the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-exPoC demonstrating quadratic DoS in Elixir html_sanitize_ex via crafted HTML; includes timing benchmarks, remote exploitation curl, and verification…
george0papasotiriou/cve-2026-23010-ccsds-telecommand-replay-without-sequence-numberPoC simulation of a critical CCSDS telecommand replay vulnerability in satellite command systems, demonstrating missing sequence-number validation…
george0papasotiriou/cve-2026-6060-quic-handshake-amplification-via-address-validation-bypassEducational Python PoC for a QUIC address-validation bypass that triggers handshake amplification, including vulnerable server simulation and attack…