A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.
☆48Aug 22, 2026Updated 2 months ago
Alternatives and similar repositories for ai-agent-hacking-writeups
Users that are interested in ai-agent-hacking-writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contains a proof-of-concept exploit that enables remote code execution in Anthropic's Claude Code CLI (with Claude Sonnet…☆14Jul 8, 2026Updated 4 months ago
- A Book on How to do Formal Verification with Certora☆14Feb 18, 2026Updated 8 months ago
- Generative web directory fuzzer,crawling and subdomain checker based on chatgpt☆15May 15, 2024Updated 2 years ago
- ☆14Sep 22, 2026Updated last month
- A Wireguard-like tool for pivoting in Redteaming and Penetration Testing.☆13Oct 29, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Convert public bug bounty hackerone reports (9,950) into reusable AI security skills and vulnerability knowledge.☆14Sep 26, 2026Updated last month
- ☆19Oct 10, 2026Updated 3 weeks ago
- ☆30Feb 28, 2026Updated 8 months ago
- Modified version of PEAS client for offensive operations☆46Jan 16, 2023Updated 3 years ago
- Source code and documentation for Srdnlen CTF 2023 challenges☆13Nov 8, 2023Updated 3 years ago
- LobotoMl is a set of scripts and tools to assess production deployments of ML services☆10May 16, 2022Updated 4 years ago
- Claude-native, governed offensive-OSINT & external attack-surface platform for authorized red-team and bug-bounty. Multi-agent recon acro…☆15Sep 12, 2026Updated last month
- Bundle of security analysis scripts for keras tensorflow models☆16Apr 15, 2024Updated 2 years ago
- A security-first linter for code that shouldn't need linting☆19Sep 12, 2023Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆36Oct 2, 2026Updated last month
- CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "d…☆16Dec 22, 2023Updated 2 years ago
- Collection of Isiah Jones security ideas, templates, tools, methodology, experiences, projects, research etc☆20Oct 29, 2026Updated last week
- PromptMe is an educational project that showcases security vulnerabilities in large language models (LLMs) and their web integrations. It…☆45Sep 10, 2026Updated last month
- exploiting and defending neural networks(神经网络攻防专栏)☆15Mar 2, 2021Updated 5 years ago
- Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for…☆17Updated this week
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- A persistent context and fieldcraft system for AI-assisted bug bounty hunting.☆14Sep 5, 2026Updated 2 months ago
- Bulk scanning of Hosts and IPs using the Shodan API☆10Apr 26, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Some research on java deserialization☆12Jan 17, 2020Updated 6 years ago
- Blast credentials across all 10 NetExec protocols in parallel — live hits, auto-skip timeouts, clean summaries. Built for fast iterative …☆17Mar 10, 2026Updated 7 months ago
- Dream-RSI for pi: assess projects, apply verified code improvements, and evolve exploration policies within bounded runs.☆14Updated this week
- InSpec profile to validate an M365 account to the standards of the CIS Microsoft 365 Foundations Benchmark.☆17Dec 14, 2025Updated 10 months ago
- Implementation of the dns cache poisoning attack reloaded (ACM CCS '20) replication.☆10Feb 20, 2021Updated 5 years ago
- A Dumb Windows App With A Sweet Theme Song for Inspecting Bad Clipboard Content☆12Apr 25, 2025Updated last year
- Unpacking tool for the zipExec Crypter☆14Oct 30, 2021Updated 5 years ago
- Research Links for LLM Security☆18May 27, 2024Updated 2 years ago
- Native sigma scanner for Linux logs☆17Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆19Feb 15, 2025Updated last year
- CTFs I've played so far☆18Feb 1, 2025Updated last year
- nxdomain subdomain enumeration☆10Jul 17, 2022Updated 4 years ago
- Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure refere…☆12Aug 17, 2026Updated 2 months ago
- Collection of prompts for helping conduct structured analytic techniques to help with threat intelligence assessments☆13Jan 5, 2026Updated 10 months ago
- DAEDALUS: Bootstrapping Agent Memory from Self-Generated Tasks. Code, paper and blog post.☆13Oct 19, 2026Updated 2 weeks ago
- This repository contains links to all the 100 days tweets that I posted during the #100DaysOfHacking challenge.☆17Apr 11, 2022Updated 4 years ago