Commit graph

2086 commits

Author SHA1 Message Date
Emmanuel Londono
a85f17c6bd
Merge branch 'danielmiessler:master' into LLM_Security_Testing 2024-04-26 12:02:18 -06:00
GitHub Action
f4c650f64a [Github Action] Automated trickest wordlists update. 2024-04-26 00:19:36 +00:00
GitHub Action
66cbdf0290 [Github Action] Automated trickest wordlists update. 2024-04-25 00:21:10 +00:00
Emmanuel Londono
b65431f249
Merge pull request #2 from ItsIgnacioPortal/patch-4
chore(docs): Improved formatting of README.md in LLM_Testing
2024-04-24 08:14:52 -06:00
Emmanuel Londono
c63bc255ca
Merge branch 'danielmiessler:master' into LLM_Security_Testing 2024-04-24 07:57:40 -06:00
Ignacio J. Perez Portal
ac7763b379
chore(docs): Improved formatting of README.md in LLM_Testing 2024-04-24 06:13:41 -03:00
GitHub Action
9a3e66dbf8 [Github Action] Automated trickest wordlists update. 2024-04-24 00:19:27 +00:00
Emmanuel Londono
dee44fb447
Merge branch 'danielmiessler:master' into LLM_Security_Testing 2024-04-23 18:03:16 -06:00
GitHub Action
54796aef81 [Github Action] Automated trickest wordlists update. 2024-04-23 00:19:43 +00:00
GitHub Action
ddd331b095 [Github Action] Automated trickest wordlists update. 2024-04-22 00:20:32 +00:00
GitHub Action
175b8bd3ff [Github Action] Automated trickest wordlists update. 2024-04-21 00:21:07 +00:00
Emmanuel Londono
862dcf0d24
Merge branch 'danielmiessler:master' into LLM_Security_Testing 2024-04-20 08:47:51 -06:00
GitHub Action
a257fde303 [Github Action] Automated trickest wordlists update. 2024-04-20 00:19:06 +00:00
GitHub Action
4c4eb6d3a2 [Github Action] Automated trickest wordlists update. 2024-04-19 00:19:30 +00:00
GitHub Action
f0892ec0ab [Github Action] Automated trickest wordlists update. 2024-04-18 00:19:18 +00:00
GitHub Action
4fb7f04a2f [Github Action] Automated trickest wordlists update. 2024-04-17 00:19:31 +00:00
GitHub Action
a86937ce15 [Github Action] Automated trickest wordlists update. 2024-04-16 00:19:11 +00:00
GitHub Action
6643be50d1 [Github Action] Automated trickest wordlists update. 2024-04-15 02:36:03 +00:00
GitHub Action
eacceeeea7 [Github Action] Automated trickest wordlists update. 2024-04-14 00:22:44 +00:00
GitHub Action
a8732be902 [Github Action] Automated trickest wordlists update. 2024-04-13 00:17:20 +00:00
GitHub Action
9904a5381c [Github Action] Automated trickest wordlists update. 2024-04-12 00:19:07 +00:00
GitHub Action
2a564a0911 [Github Action] Automated trickest wordlists update. 2024-04-11 00:19:56 +00:00
GitHub Action
8c4aa7fad8 [Github Action] Automated trickest wordlists update. 2024-04-10 00:19:02 +00:00
GitHub Action
61c18152b1 [Github Action] Automated trickest wordlists update. 2024-04-09 00:19:29 +00:00
GitHub Action
52e9ed1ac8 [Github Action] Automated trickest wordlists update. 2024-04-08 00:19:41 +00:00
GitHub Action
7e6e0ef15c [Github Action] Automated trickest wordlists update. 2024-04-07 00:21:45 +00:00
unknown
4e747a49e0 fix(LLM-Testing): Remove empty new lines.
Due to:

Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/gender_bias.txt on line 102
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/nationality_geographic_bias.txt on line 93
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/race_ethnicity_bias.txt on line 109
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/metadata.txt on line 8
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/personal_data.txt on line 92
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/escape_out_of_allignment_training.txt on line 71
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/pre-training_data.txt on line 12
2024-04-06 15:21:10 -06:00
unknown
013afd5152 feat (LLM-testing): Add directories and files related to LLM security testing.
These prompts are crafted to challenge the models in various ways, including but not limited to their ability to follow ethical guidelines, maintain data privacy, resist generating harmful or sensitive content, and avoid being exploited to perform unauthorized tasks.

Please feel free to change the directory location or name to something more appropriate!
Scalable Extraction of Training Data from (Production) Language Models.pdf
2024-04-06 15:14:37 -06:00
GitHub Action
ee33c6e1b7 [Github Action] Automated trickest wordlists update. 2024-04-06 00:18:21 +00:00
g0tmi1k
834cee13d0
Merge pull request #979 from molangning/patch-pwdb
Imported and cleaned ignis-sec/Pwdb-Public

Source: https://github.com/ignis-sec/Pwdb-Public
2024-04-05 15:32:48 +01:00
g0tmi1k
8c30d6b5c4
Merge pull request #982 from adeadfed/master
Add new dictionary for Windows LFI fuzzing


Source: https://adeadfed.com/posts/testing-lfi-in-windows-how-i-never-got-a-30000-bounty/

> The `.` at the EOL is not a mistake
> This is done as an attempt to bypass filters by abusing Windows path normalization(1,2,3) (see https://github.com/danielmiessler/SecLists/pull/982 )
2024-04-05 15:31:26 +01:00
g0tmi1k
d11b83a199
Merge pull request #994 from righettod/ntlm_directories_add
Add a dict with common NTLM directories

Source: https://github.com/nyxgeek/ntlmscan

```
$ curl -sk https://raw.githubusercontent.com/nyxgeek/ntlmscan/master/paths.dict | cut -c 2- | sort -u
_windows/default.aspx?ReturnUrl=/
```
2024-04-05 15:29:40 +01:00
g0tmi1k
abae3092df
Merge pull request #995 from molangning/patch-1
Quick typo fix
2024-04-05 15:28:49 +01:00
g0tmi1k
68ebc872de
Merge pull request #997 from molangning/patch-2
Update validators.py
2024-04-05 15:27:11 +01:00
g0tmi1k
e9337bebcf
Merge pull request #999 from ItsIgnacioPortal/RouterCredentials
feat(passwords): Added router default users and passwords

Source: https://portforward.com/

```
import os
from bs4 import BeautifulSoup

invalidValues = ["none", "N/A", "blank", "user created", "password changes when reset", "none; created during initial setup", "PrintedOnRouterLabel", "provided by ISP"]
invalidKeywords = ["none", "leave blank", "n/a", "blank", "found by", "found on", "printed on", "configured during", "create", "last", "located", "on ", "sticker on", "refer to"]

def extract_credentials(file_path):
	with open(file_path, 'r') as file:
		content = file.read()
		soup = BeautifulSoup(content, 'html.parser')
		table = soup.find('table')
		if table:
			model = table.find('th').text.strip().lower().replace('model', '').strip().replace(' ', '-').replace('/', '-')
			usernames = set()
			passwords = set()
			for row in table.find_all('tr')[1:]:
				cols = row.find_all('td')
				username = cols[1].text.strip()
				password = cols[2].text.strip()

				if username not in invalidValues:
					addUsername = True
					tempusername = username.lower()

					for keyword in invalidKeywords:
						if tempusername.startswith(keyword):
							addUsername=False
							break

					if addUsername:
						usernames.add(username)

				if password not in invalidValues:
					addPassword = True
					temppassword = password.lower()
					for keyword in invalidKeywords:
						if temppassword.startswith(keyword):
							addPassword=False
							break

					if addPassword:
						passwords.add(password)

			return model, sorted(usernames), sorted(passwords)
		else:
			return None, None, None

def save_credentials(model, usernames, passwords, output_dir):
	if model and usernames and passwords:
		user_file_path = os.path.join(output_dir, f'{model}_default-users.txt')
		pass_file_path = os.path.join(output_dir, f'{model}_default-passwords.txt')
		with open(user_file_path, 'w') as user_file:
			user_file.write('\n'.join(usernames))
		with open(pass_file_path, 'w') as pass_file:
			pass_file.write('\n'.join(passwords))

def process_files(input_dir, output_dir):
	for file_name in os.listdir(input_dir):
		print(f'Processing file {file_name}')
		file_path = os.path.join(input_dir, file_name)
		model, usernames, passwords = extract_credentials(file_path)
		save_credentials(model, usernames, passwords, output_dir)

# Input directory containing the text files
input_dir = "C:\\Users\\User\\Desktop\\out\\portforward.com"
# Output directory where the output files will be saved
output_dir = "C:\\Users\\User\\Github\\SecLists\\Passwords\\Default-Credentials\\Routers"
process_files(input_dir, output_dir)
```
2024-04-05 15:26:08 +01:00
g0tmi1k
babab451e7
Merge pull request #1001 from molangning/patch-issues-template
Changed issues templates
2024-04-05 15:24:06 +01:00
g0tmi1k
4bca650afa
Merge pull request #1002 from molangning/patch-contributing-guidelines
Added more specifications
2024-04-05 15:23:11 +01:00
g0tmi1k
0fd0f18fb6
Merge pull request #1003 from molangning/patch-normalise-line-endings
Normalised line endings
2024-04-05 15:22:24 +01:00
GitHub Action
9385914f42 [Github Action] Automated readme update. 2024-04-05 14:21:59 +00:00
g0tmi1k
48aaf83f4a
Merge pull request #1004 from molangning/patch-normalise-folders
Rename folders
2024-04-05 15:20:52 +01:00
g0tmi1k
d15e6a4545
Merge pull request #990 from 0xjams/CVE-2023-51442
Added a JWT key used in CVE-2023-51442

Source: https://github.com/advisories/GHSA-wq59-4q6r-635r
2024-04-05 15:19:40 +01:00
Mo Langning
73f78c4133 Rename folders 2024-04-05 10:42:21 +00:00
Mo Langning
c6fa73c975 Normalised line endings 2024-04-05 10:26:17 +00:00
Mo Langning
6b4504b9df Added more specifications 2024-04-05 10:19:41 +00:00
Mo Langning
d9dd80b90a Changed templates 2024-04-05 10:12:47 +00:00
Ignacio J. Perez Portal
c84fcf055b
chore: Wording 2024-04-05 04:03:05 -03:00
Ignacio J. Perez Portal
9c80d344e1
chore: Fixed typo in router default-passwords README.md 2024-04-05 04:02:43 -03:00
Ignacio J. Perez Portal
fff4d42b5f feat(passwords): Added router default users and passwords
sources:
- https://portforward.com/
2024-04-05 03:40:32 -03:00
Mo Langning
8b020ac007
Update validators.py 2024-04-05 10:00:33 +08:00
Mo Langning
5433460af5
Update validators.py 2024-04-05 08:28:04 +08:00