862dcf0d24
Merge branch 'danielmiessler:master' into LLM_Security_Testing
2024-04-20 08:47:51 -06:00
a257fde303
[Github Action] Automated trickest wordlists update.
2024-04-20 00:19:06 +00:00
4c4eb6d3a2
[Github Action] Automated trickest wordlists update.
2024-04-19 00:19:30 +00:00
f0892ec0ab
[Github Action] Automated trickest wordlists update.
2024-04-18 00:19:18 +00:00
4fb7f04a2f
[Github Action] Automated trickest wordlists update.
2024-04-17 00:19:31 +00:00
a86937ce15
[Github Action] Automated trickest wordlists update.
2024-04-16 00:19:11 +00:00
6643be50d1
[Github Action] Automated trickest wordlists update.
2024-04-15 02:36:03 +00:00
eacceeeea7
[Github Action] Automated trickest wordlists update.
2024-04-14 00:22:44 +00:00
a8732be902
[Github Action] Automated trickest wordlists update.
2024-04-13 00:17:20 +00:00
9904a5381c
[Github Action] Automated trickest wordlists update.
2024-04-12 00:19:07 +00:00
2a564a0911
[Github Action] Automated trickest wordlists update.
2024-04-11 00:19:56 +00:00
8c4aa7fad8
[Github Action] Automated trickest wordlists update.
2024-04-10 00:19:02 +00:00
61c18152b1
[Github Action] Automated trickest wordlists update.
2024-04-09 00:19:29 +00:00
52e9ed1ac8
[Github Action] Automated trickest wordlists update.
2024-04-08 00:19:41 +00:00
7e6e0ef15c
[Github Action] Automated trickest wordlists update.
2024-04-07 00:21:45 +00:00
4e747a49e0
fix(LLM-Testing): Remove empty new lines.
...
Due to:
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/gender_bias.txt on line 102
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/nationality_geographic_bias.txt on line 93
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/race_ethnicity_bias.txt on line 109
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/metadata.txt on line 8
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/personal_data.txt on line 92
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/escape_out_of_allignment_training.txt on line 71
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/pre-training_data.txt on line 12
2024-04-06 15:21:10 -06:00
013afd5152
feat (LLM-testing): Add directories and files related to LLM security testing.
...
These prompts are crafted to challenge the models in various ways, including but not limited to their ability to follow ethical guidelines, maintain data privacy, resist generating harmful or sensitive content, and avoid being exploited to perform unauthorized tasks.
Please feel free to change the directory location or name to something more appropriate!
Scalable Extraction of Training Data from (Production) Language Models.pdf
2024-04-06 15:14:37 -06:00
ee33c6e1b7
[Github Action] Automated trickest wordlists update.
2024-04-06 00:18:21 +00:00
834cee13d0
Merge pull request #979 from molangning/patch-pwdb
...
Imported and cleaned ignis-sec/Pwdb-Public
Source: https://github.com/ignis-sec/Pwdb-Public
2024-04-05 15:32:48 +01:00
8c30d6b5c4
Merge pull request #982 from adeadfed/master
...
Add new dictionary for Windows LFI fuzzing
Source: https://adeadfed.com/posts/testing-lfi-in-windows-how-i-never-got-a-30000-bounty/
> The `.` at the EOL is not a mistake
> This is done as an attempt to bypass filters by abusing Windows path normalization(1,2,3) (see https://github.com/danielmiessler/SecLists/pull/982 )
2024-04-05 15:31:26 +01:00
d11b83a199
Merge pull request #994 from righettod/ntlm_directories_add
...
Add a dict with common NTLM directories
Source: https://github.com/nyxgeek/ntlmscan
```
$ curl -sk https://raw.githubusercontent.com/nyxgeek/ntlmscan/master/paths.dict | cut -c 2- | sort -u
_windows/default.aspx?ReturnUrl=/
```
2024-04-05 15:29:40 +01:00
abae3092df
Merge pull request #995 from molangning/patch-1
...
Quick typo fix
2024-04-05 15:28:49 +01:00
68ebc872de
Merge pull request #997 from molangning/patch-2
...
Update validators.py
2024-04-05 15:27:11 +01:00
e9337bebcf
Merge pull request #999 from ItsIgnacioPortal/RouterCredentials
...
feat(passwords): Added router default users and passwords
Source: https://portforward.com/
```
import os
from bs4 import BeautifulSoup
invalidValues = ["none", "N/A", "blank", "user created", "password changes when reset", "none; created during initial setup", "PrintedOnRouterLabel", "provided by ISP"]
invalidKeywords = ["none", "leave blank", "n/a", "blank", "found by", "found on", "printed on", "configured during", "create", "last", "located", "on ", "sticker on", "refer to"]
def extract_credentials(file_path):
with open(file_path, 'r') as file:
content = file.read()
soup = BeautifulSoup(content, 'html.parser')
table = soup.find('table')
if table:
model = table.find('th').text.strip().lower().replace('model', '').strip().replace(' ', '-').replace('/', '-')
usernames = set()
passwords = set()
for row in table.find_all('tr')[1:]:
cols = row.find_all('td')
username = cols[1].text.strip()
password = cols[2].text.strip()
if username not in invalidValues:
addUsername = True
tempusername = username.lower()
for keyword in invalidKeywords:
if tempusername.startswith(keyword):
addUsername=False
break
if addUsername:
usernames.add(username)
if password not in invalidValues:
addPassword = True
temppassword = password.lower()
for keyword in invalidKeywords:
if temppassword.startswith(keyword):
addPassword=False
break
if addPassword:
passwords.add(password)
return model, sorted(usernames), sorted(passwords)
else:
return None, None, None
def save_credentials(model, usernames, passwords, output_dir):
if model and usernames and passwords:
user_file_path = os.path.join(output_dir, f'{model}_default-users.txt')
pass_file_path = os.path.join(output_dir, f'{model}_default-passwords.txt')
with open(user_file_path, 'w') as user_file:
user_file.write('\n'.join(usernames))
with open(pass_file_path, 'w') as pass_file:
pass_file.write('\n'.join(passwords))
def process_files(input_dir, output_dir):
for file_name in os.listdir(input_dir):
print(f'Processing file {file_name}')
file_path = os.path.join(input_dir, file_name)
model, usernames, passwords = extract_credentials(file_path)
save_credentials(model, usernames, passwords, output_dir)
# Input directory containing the text files
input_dir = "C:\\Users\\User\\Desktop\\out\\portforward.com"
# Output directory where the output files will be saved
output_dir = "C:\\Users\\User\\Github\\SecLists\\Passwords\\Default-Credentials\\Routers"
process_files(input_dir, output_dir)
```
2024-04-05 15:26:08 +01:00
babab451e7
Merge pull request #1001 from molangning/patch-issues-template
...
Changed issues templates
2024-04-05 15:24:06 +01:00
4bca650afa
Merge pull request #1002 from molangning/patch-contributing-guidelines
...
Added more specifications
2024-04-05 15:23:11 +01:00
0fd0f18fb6
Merge pull request #1003 from molangning/patch-normalise-line-endings
...
Normalised line endings
2024-04-05 15:22:24 +01:00
9385914f42
[Github Action] Automated readme update.
2024-04-05 14:21:59 +00:00
48aaf83f4a
Merge pull request #1004 from molangning/patch-normalise-folders
...
Rename folders
2024-04-05 15:20:52 +01:00
d15e6a4545
Merge pull request #990 from 0xjams/CVE-2023-51442
...
Added a JWT key used in CVE-2023-51442
Source: https://github.com/advisories/GHSA-wq59-4q6r-635r
2024-04-05 15:19:40 +01:00
73f78c4133
Rename folders
2024-04-05 10:42:21 +00:00
c6fa73c975
Normalised line endings
2024-04-05 10:26:17 +00:00
6b4504b9df
Added more specifications
2024-04-05 10:19:41 +00:00
d9dd80b90a
Changed templates
2024-04-05 10:12:47 +00:00
c84fcf055b
chore: Wording
2024-04-05 04:03:05 -03:00
9c80d344e1
chore: Fixed typo in router default-passwords README.md
2024-04-05 04:02:43 -03:00
fff4d42b5f
feat(passwords): Added router default users and passwords
...
sources:
- https://portforward.com/
2024-04-05 03:40:32 -03:00
8b020ac007
Update validators.py
2024-04-05 10:00:33 +08:00
5433460af5
Update validators.py
2024-04-05 08:28:04 +08:00
997dca7afc
[Github Action] Automated trickest wordlists update.
2024-04-05 00:19:24 +00:00
2b62bd209c
[Github Action] Automated trickest wordlists update.
2024-04-04 00:19:44 +00:00
cc0d910d95
Quick typo fix
2024-04-03 11:47:07 +08:00
0392ab9020
[Github Action] Automated trickest wordlists update.
2024-04-03 00:18:58 +00:00
e4cf8df21e
[Github Action] Automated trickest wordlists update.
2024-04-02 00:19:04 +00:00
4414aa3885
[Github Action] Automated trickest wordlists update.
2024-04-01 00:21:29 +00:00
644238c35c
fix: Removed windows-incompatible content
2024-03-31 17:02:18 -03:00
b182418f05
[Github Action] Automated trickest wordlists update.
2024-03-31 00:21:32 +00:00
f4d9bb68e3
Remove empty line
2024-03-30 17:43:46 +01:00
14a48970a1
Create ntlm-directories.txt
2024-03-30 17:28:41 +01:00
3373154baf
[Github Action] Automated readme update.
2024-03-30 16:08:57 +00:00
Emmanuel Londono