Commit Graph

2601 Commits

Author SHA1 Message Date
GitHub Action 9a3e66dbf8 [Github Action] Automated trickest wordlists update. 2024-04-24 00:19:27 +00:00
Emmanuel Londono dee44fb447 Merge branch 'danielmiessler:master' into LLM_Security_Testing 2024-04-23 18:03:16 -06:00
jvar 7523fb4e32 Added .phar 2024-04-23 15:46:20 +05:30
GitHub Action 54796aef81 [Github Action] Automated trickest wordlists update. 2024-04-23 00:19:43 +00:00
GitHub Action ddd331b095 [Github Action] Automated trickest wordlists update. 2024-04-22 00:20:32 +00:00
GitHub Action 175b8bd3ff [Github Action] Automated trickest wordlists update. 2024-04-21 00:21:07 +00:00
Emmanuel Londono 862dcf0d24 Merge branch 'danielmiessler:master' into LLM_Security_Testing 2024-04-20 08:47:51 -06:00
GitHub Action a257fde303 [Github Action] Automated trickest wordlists update. 2024-04-20 00:19:06 +00:00
GitHub Action 4c4eb6d3a2 [Github Action] Automated trickest wordlists update. 2024-04-19 00:19:30 +00:00
GitHub Action f0892ec0ab [Github Action] Automated trickest wordlists update. 2024-04-18 00:19:18 +00:00
GitHub Action 4fb7f04a2f [Github Action] Automated trickest wordlists update. 2024-04-17 00:19:31 +00:00
GitHub Action a86937ce15 [Github Action] Automated trickest wordlists update. 2024-04-16 00:19:11 +00:00
GitHub Action 6643be50d1 [Github Action] Automated trickest wordlists update. 2024-04-15 02:36:03 +00:00
GitHub Action eacceeeea7 [Github Action] Automated trickest wordlists update. 2024-04-14 00:22:44 +00:00
GitHub Action a8732be902 [Github Action] Automated trickest wordlists update. 2024-04-13 00:17:20 +00:00
GitHub Action 9904a5381c [Github Action] Automated trickest wordlists update. 2024-04-12 00:19:07 +00:00
GitHub Action 2a564a0911 [Github Action] Automated trickest wordlists update. 2024-04-11 00:19:56 +00:00
GitHub Action 8c4aa7fad8 [Github Action] Automated trickest wordlists update. 2024-04-10 00:19:02 +00:00
YouFoundAlpha b4ff2c47a5 Update README.md 2024-04-09 11:21:51 +03:00
GitHub Action 61c18152b1 [Github Action] Automated trickest wordlists update. 2024-04-09 00:19:29 +00:00
Mo Langning 1c9376a8eb Verbose logging 2024-04-08 08:48:56 +00:00
Mo Langning 607736efd4 Used env vars as input instead and removed debug line 2024-04-08 08:42:25 +00:00
Mo Langning a1a38ed648 Added back the annoying print statements 2024-04-08 07:48:00 +00:00
Mo Langning c0a835b360 Added edge case where there is two kinds of error in one file 2024-04-08 07:44:40 +00:00
Mo Langning cc38b6f669 Update remote-wordlists-updater.yml 2024-04-08 13:40:46 +08:00
Mo Langning cb65072e8f Removed debug line 2024-04-08 03:56:06 +00:00
Mo Langning 11395701ee Added an overwrite check and field 2024-04-08 03:49:43 +00:00
GitHub Action 52e9ed1ac8 [Github Action] Automated trickest wordlists update. 2024-04-08 00:19:41 +00:00
Mo Langning 34b6d09237 Rename workflow file 2024-04-08 07:48:38 +08:00
GitHub Action 7e6e0ef15c [Github Action] Automated trickest wordlists update. 2024-04-07 00:21:45 +00:00
unknown 4e747a49e0 fix(LLM-Testing): Remove empty new lines.
Due to:

Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/gender_bias.txt on line 102
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/nationality_geographic_bias.txt on line 93
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/race_ethnicity_bias.txt on line 109
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/metadata.txt on line 8
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/personal_data.txt on line 92
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/escape_out_of_allignment_training.txt on line 71
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/pre-training_data.txt on line 12
2024-04-06 15:21:10 -06:00
unknown 013afd5152 feat (LLM-testing): Add directories and files related to LLM security testing.
These prompts are crafted to challenge the models in various ways, including but not limited to their ability to follow ethical guidelines, maintain data privacy, resist generating harmful or sensitive content, and avoid being exploited to perform unauthorized tasks.

Please feel free to change the directory location or name to something more appropriate!
Scalable Extraction of Training Data from (Production) Language Models.pdf
2024-04-06 15:14:37 -06:00
Mo Langning 1217405b5b Re added file 2024-04-06 04:16:35 +00:00
Mo Langning 3577c3a670 Added workflow file 2024-04-06 04:15:37 +00:00
Mo Langning 359f8adbba Added daily update at certain utc time functionality 2024-04-06 04:14:38 +00:00
Mo Langning 9efafd8a72 Readme update 2024-04-06 04:14:11 +00:00
Mo Langning 7da40d62e6 Reformatted file 2024-04-06 04:13:43 +00:00
Mo Langning e7ba29df43 Minimum working version 2024-04-06 04:12:58 +00:00
GitHub Action ee33c6e1b7 [Github Action] Automated trickest wordlists update. 2024-04-06 00:18:21 +00:00
g0tmi1k 834cee13d0 Merge pull request #979 from molangning/patch-pwdb
Imported and cleaned ignis-sec/Pwdb-Public

Source: https://github.com/ignis-sec/Pwdb-Public
2024-04-05 15:32:48 +01:00
g0tmi1k 8c30d6b5c4 Merge pull request #982 from adeadfed/master
Add new dictionary for Windows LFI fuzzing


Source: https://adeadfed.com/posts/testing-lfi-in-windows-how-i-never-got-a-30000-bounty/

> The `.` at the EOL is not a mistake
> This is done as an attempt to bypass filters by abusing Windows path normalization(1,2,3) (see https://github.com/danielmiessler/SecLists/pull/982 )
2024-04-05 15:31:26 +01:00
g0tmi1k d11b83a199 Merge pull request #994 from righettod/ntlm_directories_add
Add a dict with common NTLM directories

Source: https://github.com/nyxgeek/ntlmscan

```
$ curl -sk https://raw.githubusercontent.com/nyxgeek/ntlmscan/master/paths.dict | cut -c 2- | sort -u
_windows/default.aspx?ReturnUrl=/
```
2024-04-05 15:29:40 +01:00
g0tmi1k abae3092df Merge pull request #995 from molangning/patch-1
Quick typo fix
2024-04-05 15:28:49 +01:00
g0tmi1k 68ebc872de Merge pull request #997 from molangning/patch-2
Update validators.py
2024-04-05 15:27:11 +01:00
g0tmi1k e9337bebcf Merge pull request #999 from ItsIgnacioPortal/RouterCredentials
feat(passwords): Added router default users and passwords

Source: https://portforward.com/

```
import os
from bs4 import BeautifulSoup

invalidValues = ["none", "N/A", "blank", "user created", "password changes when reset", "none; created during initial setup", "PrintedOnRouterLabel", "provided by ISP"]
invalidKeywords = ["none", "leave blank", "n/a", "blank", "found by", "found on", "printed on", "configured during", "create", "last", "located", "on ", "sticker on", "refer to"]

def extract_credentials(file_path):
	with open(file_path, 'r') as file:
		content = file.read()
		soup = BeautifulSoup(content, 'html.parser')
		table = soup.find('table')
		if table:
			model = table.find('th').text.strip().lower().replace('model', '').strip().replace(' ', '-').replace('/', '-')
			usernames = set()
			passwords = set()
			for row in table.find_all('tr')[1:]:
				cols = row.find_all('td')
				username = cols[1].text.strip()
				password = cols[2].text.strip()

				if username not in invalidValues:
					addUsername = True
					tempusername = username.lower()

					for keyword in invalidKeywords:
						if tempusername.startswith(keyword):
							addUsername=False
							break

					if addUsername:
						usernames.add(username)

				if password not in invalidValues:
					addPassword = True
					temppassword = password.lower()
					for keyword in invalidKeywords:
						if temppassword.startswith(keyword):
							addPassword=False
							break

					if addPassword:
						passwords.add(password)

			return model, sorted(usernames), sorted(passwords)
		else:
			return None, None, None

def save_credentials(model, usernames, passwords, output_dir):
	if model and usernames and passwords:
		user_file_path = os.path.join(output_dir, f'{model}_default-users.txt')
		pass_file_path = os.path.join(output_dir, f'{model}_default-passwords.txt')
		with open(user_file_path, 'w') as user_file:
			user_file.write('\n'.join(usernames))
		with open(pass_file_path, 'w') as pass_file:
			pass_file.write('\n'.join(passwords))

def process_files(input_dir, output_dir):
	for file_name in os.listdir(input_dir):
		print(f'Processing file {file_name}')
		file_path = os.path.join(input_dir, file_name)
		model, usernames, passwords = extract_credentials(file_path)
		save_credentials(model, usernames, passwords, output_dir)

# Input directory containing the text files
input_dir = "C:\\Users\\User\\Desktop\\out\\portforward.com"
# Output directory where the output files will be saved
output_dir = "C:\\Users\\User\\Github\\SecLists\\Passwords\\Default-Credentials\\Routers"
process_files(input_dir, output_dir)
```
2024-04-05 15:26:08 +01:00
g0tmi1k babab451e7 Merge pull request #1001 from molangning/patch-issues-template
Changed issues templates
2024-04-05 15:24:06 +01:00
g0tmi1k 4bca650afa Merge pull request #1002 from molangning/patch-contributing-guidelines
Added more specifications
2024-04-05 15:23:11 +01:00
g0tmi1k 0fd0f18fb6 Merge pull request #1003 from molangning/patch-normalise-line-endings
Normalised line endings
2024-04-05 15:22:24 +01:00
GitHub Action 9385914f42 [Github Action] Automated readme update. 2024-04-05 14:21:59 +00:00
g0tmi1k 48aaf83f4a Merge pull request #1004 from molangning/patch-normalise-folders
Rename folders
2024-04-05 15:20:52 +01:00