BishopFox / llm-testing-findings
LLM Testing Findings Templates
☆66Updated last year
Alternatives and similar repositories for llm-testing-findings:
Users that are interested in llm-testing-findings are comparing it to the libraries listed below
- InfoSec OpenAI Examples☆19Updated last year
- ☆109Updated last year
- A tool to keep AWS pentests and red teams efficient, organized, and stealthy.☆89Updated 11 months ago
- ☆33Updated last month
- An LLM and OCR based Indicator of Compromise Extraction Tool☆33Updated 2 months ago
- Nuclei plugins to audit Chrome extensions☆64Updated 6 months ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆63Updated last year
- Blogpost series showcasing interesting cloud - web app security bugs☆47Updated last year
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects☆34Updated this week
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆58Updated last year
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆40Updated last year
- ☆35Updated last month
- Examine Chrome extensions for security issues☆74Updated this week
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 5 months ago
- source code for the offsecml framework☆37Updated 8 months ago
- A research project to add some brrrrrr to Burp☆127Updated this week
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆64Updated this week
- This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me☆17Updated 6 months ago
- ☆93Updated 2 years ago
- IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.☆100Updated last year
- 📚A curated list of product security resources.☆19Updated 2 years ago
- A fun POC that is built to understand AI security agents.☆23Updated last month
- Determine privileges from cloud credentials via brute-force testing.☆66Updated 5 months ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆91Updated last year
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆30Updated 2 years ago
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆26Updated 7 months ago
- AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…☆102Updated 9 months ago
- This provides a guided step by step walkthrough for threat modeling with MITRE ATT&CK Framework☆27Updated this week
- Do bulk whois lookups and get alerted on domains of interest.☆24Updated 6 months ago