Blacksea is an active honeypot and canary-bait control system built to detect and drown LLM-driven attackers. Blacksea doesn't stop at watching LLM attacks. It exploits flaws in the attacker's LLM judgment to gain arbitrary code execution on their machines, collect intel passive defenses can't reach, and make sure they don't come back.
☆104Sep 15, 2026Updated last month
Alternatives and similar repositories for blacksea
Users that are interested in blacksea are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.☆55Aug 24, 2026Updated last month
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆453Updated this week
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- The HTTP/2 CLI for finding tiny timing differences and winning request races☆82Sep 24, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Research code for the paper "The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers" https://arxiv.org/abs/2602…☆39Mar 26, 2026Updated 6 months ago
- ☆17Sep 2, 2026Updated last month
- Redefining vulnerability disclosure in the AI era. We mass-produce exploitable 0days and disclose them directly, using event-driven press…☆233Updated this week
- Kali365 - EvilTokens Replica☆74Jul 7, 2026Updated 3 months ago
- The entire knowledge around the detection lifecycle, encoded into skills. More details at https://detectionskills.io/☆55Updated this week
- A font-based deception tool for red teaming, security research, and whatever else.☆353Aug 9, 2026Updated 2 months ago
- Extract hashes from VBK files -- cause it's fun...☆52Aug 10, 2026Updated 2 months ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆54Sep 25, 2026Updated 3 weeks ago
- Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for …☆52Aug 20, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An AI CTF challenges to learn some of the risks that AI Chatbots pose☆77Sep 20, 2026Updated 3 weeks ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆109Sep 25, 2026Updated 3 weeks ago
- EAA is a curated catalog of techniques and real-world cases involving abuse of local AI agents through their runtime, configuration, stat…☆94Oct 3, 2026Updated 2 weeks ago
- The reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical v…☆53Updated this week
- Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failu…☆111Oct 2, 2026Updated 2 weeks ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Malware as a Service Ludus Range☆129Sep 24, 2026Updated 3 weeks ago
- Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.☆48Sep 26, 2026Updated 3 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆33Feb 10, 2026Updated 8 months ago
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆59Jul 13, 2025Updated last year
- POC tool for ResetNightmare (CVE-2026-27912)☆224Aug 20, 2026Updated last month
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆397Aug 16, 2026Updated 2 months ago
- NetExec MCP☆88Oct 11, 2026Updated last week
- Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI…☆336Sep 14, 2026Updated last month
- ☆11May 19, 2022Updated 4 years ago
- Web scraper, written in Elixir, that pulls cybersecurity job postings from public hiring APIs, isolates the genuine cybersecurity roles, …☆81Jun 2, 2026Updated 4 months ago
- Claude Code plugin that stops Claude writing like an AI. 29 researched patterns, loaded every session and checked on every file write.☆31Aug 19, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Find and redact secrets in AI coding agent histories (Claude Code, and more).☆86Updated this week
- Claude Code plugin for writing triager-grade bug bounty reports☆274Aug 25, 2026Updated last month
- A defensive decompilation layer: Ghidra facts, lifted into runnable Python & artifacts aiding analysis.☆16Aug 7, 2026Updated 2 months ago
- Refusal handling skill for vulnerability research evals☆46May 3, 2026Updated 5 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆24Updated this week
- ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.☆2,064Updated this week
- Step-by-step handbook for building autonomous security agents with clear limits, runnable lessons, diagrams, and honest evidence.☆75Sep 24, 2026Updated 3 weeks ago