dhammon

ai-goat. Learn AI security through a series of vulnerable LLM CTF challenges. No sign ups, no cloud fees, run everything locally on your system.

zosi-hack.

AttacksAndCountermeasures. The Attacks and Countermeasures textbook prescribes hands-on learning through practical lab work that can be accomplished on most laptop or desktop computers. Each chapter is designed around these labs based on common cybersecurity subdisciplines.

AWS-WAFv2-8kb-Bypass. HCL

security-assistant. The Security Assistant is an Ollama based large language model (LLM) retrieval-augmented generation (RAG) project that summarizes PDF and XLSX documents and responds to customer and auditor security questions. Everything runs locally and does not rely on third party/online models.

pfBlockerNg-CVE-2022-40624.

lambda-rasp. AWS Lambda runtime application self-protection (RASP). Free and opensource.

Keysgen_opensource. PHP

CodeScuttle. Python

Dependescope. Python

blind-boolean-based-prompt-injection. This repository demonstrates the Blind Boolean-Based Prompt Injection (BBPI) attack, a prompt injection technique where an attacker derives confidential instructions (system prompt) by encoding true/false predicates as user prompts and observing constrained or categorical static outputs.