WAF-A-MoLE
avalz/waf-a-moleA guided mutation-based fuzzer for ML-based Web Application Firewalls
adversarial-attackfuzzingmachine-learning+2
205
avalz/waf-a-moleA guided mutation-based fuzzer for ML-based Web Application Firewalls
zhengxr930/malevalOfficial code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing
digicred-oss/caos-osCustomer Assurance Operating System. Answer the security questionnaires your customers send you, once.
promptfoo/promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…
pandaadir05/ghostDetects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…
alainnothere/llm-circuit-finderI replicated Ng's RYS method and found that duplicating 3 specific layers in Qwen2.5-32B boosts reasoning by 17% and duplicating layers 12-14 in…
weareaisle/nano-analyzerA minimal LLM-powered zero-day vulnerability scanner by AISLE.
lt-asset/resymFor our CCS24 paper 🏆 "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" by Danning Xie, Zhuo Zhang, Nan…
gherardofiori/maliciousbrowserextensionsThis Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…
josh-blythe/bordair-multimodalOpen-source cross-modal and multimodal prompt injection test suite. 250,000+ attack payloads across text, image, document, and audio modalities.…
aloshdenny/claude-awmEvades LLM text watermarks by injecting Unicode variation selectors; includes the SynthID generator, mean-g detector, normalization defenses, and…
ahaggard2013/binaryninja-ollamaPlugin for Binary Ninja that integrates local Ollama models to rename functions and variables in decompiled HLIL code, preserving privacy by keeping…
yeasen-z/leakgaugeDetects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.
roxanne_ardary/emailxposeEmailXpose is an open source AI-powered email security system that detects phishing, spam, scams, malware, and social engineering attacks. It goes…
neuromancer/rats-reReconstructs legacy Windows binaries into C source by pairing Ghidra decompiler exports with local LLMs, producing compile-checked candidates and…
ayinedjimi-consultants/ldaprecon-aiActive Directory LDAP Security Auditor with AI-Powered Analysis - By Ayi NEDJIMI https://ayinedjimi-consultants.fr
chanwoochoi316/kidnapragBlack-box attack framework that hijacks reasoning in agentic retrieval-augmented generation systems by injecting poisoned documents, with support for…
cleverhans-lab/cleverhansAn adversarial example library for constructing attacks, building defenses, and benchmarking both