Commit graph

2544 commits

Author SHA1 Message Date
GitHub Action
a257fde303 [Github Action] Automated trickest wordlists update. 2024-04-20 00:19:06 +00:00
GitHub Action
4c4eb6d3a2 [Github Action] Automated trickest wordlists update. 2024-04-19 00:19:30 +00:00
GitHub Action
f0892ec0ab [Github Action] Automated trickest wordlists update. 2024-04-18 00:19:18 +00:00
GitHub Action
4fb7f04a2f [Github Action] Automated trickest wordlists update. 2024-04-17 00:19:31 +00:00
GitHub Action
a86937ce15 [Github Action] Automated trickest wordlists update. 2024-04-16 00:19:11 +00:00
GitHub Action
6643be50d1 [Github Action] Automated trickest wordlists update. 2024-04-15 02:36:03 +00:00
GitHub Action
eacceeeea7 [Github Action] Automated trickest wordlists update. 2024-04-14 00:22:44 +00:00
GitHub Action
a8732be902 [Github Action] Automated trickest wordlists update. 2024-04-13 00:17:20 +00:00
GitHub Action
9904a5381c [Github Action] Automated trickest wordlists update. 2024-04-12 00:19:07 +00:00
GitHub Action
2a564a0911 [Github Action] Automated trickest wordlists update. 2024-04-11 00:19:56 +00:00
GitHub Action
8c4aa7fad8 [Github Action] Automated trickest wordlists update. 2024-04-10 00:19:02 +00:00
YouFoundAlpha
b4ff2c47a5
Update README.md 2024-04-09 11:21:51 +03:00
GitHub Action
61c18152b1 [Github Action] Automated trickest wordlists update. 2024-04-09 00:19:29 +00:00
Mo Langning
1c9376a8eb Verbose logging 2024-04-08 08:48:56 +00:00
Mo Langning
607736efd4 Used env vars as input instead and removed debug line 2024-04-08 08:42:25 +00:00
Mo Langning
a1a38ed648 Added back the annoying print statements 2024-04-08 07:48:00 +00:00
Mo Langning
c0a835b360 Added edge case where there is two kinds of error in one file 2024-04-08 07:44:40 +00:00
Mo Langning
cc38b6f669
Update remote-wordlists-updater.yml 2024-04-08 13:40:46 +08:00
Mo Langning
cb65072e8f Removed debug line 2024-04-08 03:56:06 +00:00
Mo Langning
11395701ee Added an overwrite check and field 2024-04-08 03:49:43 +00:00
GitHub Action
52e9ed1ac8 [Github Action] Automated trickest wordlists update. 2024-04-08 00:19:41 +00:00
Mo Langning
34b6d09237
Rename workflow file 2024-04-08 07:48:38 +08:00
GitHub Action
7e6e0ef15c [Github Action] Automated trickest wordlists update. 2024-04-07 00:21:45 +00:00
unknown
4e747a49e0 fix(LLM-Testing): Remove empty new lines.
Due to:

Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/gender_bias.txt on line 102
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/nationality_geographic_bias.txt on line 93
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Bias_Testing/race_ethnicity_bias.txt on line 109
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/metadata.txt on line 8
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Data_Leakage/personal_data.txt on line 92
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/escape_out_of_allignment_training.txt on line 71
Error: [!] Checker .bin/checkers/new-line-and-empty-line-checker.py got a warning for Ai/LLM_Testing/Divergence_attack/pre-training_data.txt on line 12
2024-04-06 15:21:10 -06:00
unknown
013afd5152 feat (LLM-testing): Add directories and files related to LLM security testing.
These prompts are crafted to challenge the models in various ways, including but not limited to their ability to follow ethical guidelines, maintain data privacy, resist generating harmful or sensitive content, and avoid being exploited to perform unauthorized tasks.

Please feel free to change the directory location or name to something more appropriate!
Scalable Extraction of Training Data from (Production) Language Models.pdf
2024-04-06 15:14:37 -06:00
Mo Langning
1217405b5b Re added file 2024-04-06 04:16:35 +00:00
Mo Langning
3577c3a670 Added workflow file 2024-04-06 04:15:37 +00:00
Mo Langning
359f8adbba Added daily update at certain utc time functionality 2024-04-06 04:14:38 +00:00
Mo Langning
9efafd8a72 Readme update 2024-04-06 04:14:11 +00:00
Mo Langning
7da40d62e6 Reformatted file 2024-04-06 04:13:43 +00:00
Mo Langning
e7ba29df43 Minimum working version 2024-04-06 04:12:58 +00:00
GitHub Action
ee33c6e1b7 [Github Action] Automated trickest wordlists update. 2024-04-06 00:18:21 +00:00
g0tmi1k
834cee13d0
Merge pull request #979 from molangning/patch-pwdb
Imported and cleaned ignis-sec/Pwdb-Public

Source: https://github.com/ignis-sec/Pwdb-Public
2024-04-05 15:32:48 +01:00
g0tmi1k
8c30d6b5c4
Merge pull request #982 from adeadfed/master
Add new dictionary for Windows LFI fuzzing


Source: https://adeadfed.com/posts/testing-lfi-in-windows-how-i-never-got-a-30000-bounty/

> The `.` at the EOL is not a mistake
> This is done as an attempt to bypass filters by abusing Windows path normalization(1,2,3) (see https://github.com/danielmiessler/SecLists/pull/982 )
2024-04-05 15:31:26 +01:00
g0tmi1k
d11b83a199
Merge pull request #994 from righettod/ntlm_directories_add
Add a dict with common NTLM directories

Source: https://github.com/nyxgeek/ntlmscan

```
$ curl -sk https://raw.githubusercontent.com/nyxgeek/ntlmscan/master/paths.dict | cut -c 2- | sort -u
_windows/default.aspx?ReturnUrl=/
```
2024-04-05 15:29:40 +01:00
g0tmi1k
abae3092df
Merge pull request #995 from molangning/patch-1
Quick typo fix
2024-04-05 15:28:49 +01:00
g0tmi1k
68ebc872de
Merge pull request #997 from molangning/patch-2
Update validators.py
2024-04-05 15:27:11 +01:00
g0tmi1k
e9337bebcf
Merge pull request #999 from ItsIgnacioPortal/RouterCredentials
feat(passwords): Added router default users and passwords

Source: https://portforward.com/

```
import os
from bs4 import BeautifulSoup

invalidValues = ["none", "N/A", "blank", "user created", "password changes when reset", "none; created during initial setup", "PrintedOnRouterLabel", "provided by ISP"]
invalidKeywords = ["none", "leave blank", "n/a", "blank", "found by", "found on", "printed on", "configured during", "create", "last", "located", "on ", "sticker on", "refer to"]

def extract_credentials(file_path):
	with open(file_path, 'r') as file:
		content = file.read()
		soup = BeautifulSoup(content, 'html.parser')
		table = soup.find('table')
		if table:
			model = table.find('th').text.strip().lower().replace('model', '').strip().replace(' ', '-').replace('/', '-')
			usernames = set()
			passwords = set()
			for row in table.find_all('tr')[1:]:
				cols = row.find_all('td')
				username = cols[1].text.strip()
				password = cols[2].text.strip()

				if username not in invalidValues:
					addUsername = True
					tempusername = username.lower()

					for keyword in invalidKeywords:
						if tempusername.startswith(keyword):
							addUsername=False
							break

					if addUsername:
						usernames.add(username)

				if password not in invalidValues:
					addPassword = True
					temppassword = password.lower()
					for keyword in invalidKeywords:
						if temppassword.startswith(keyword):
							addPassword=False
							break

					if addPassword:
						passwords.add(password)

			return model, sorted(usernames), sorted(passwords)
		else:
			return None, None, None

def save_credentials(model, usernames, passwords, output_dir):
	if model and usernames and passwords:
		user_file_path = os.path.join(output_dir, f'{model}_default-users.txt')
		pass_file_path = os.path.join(output_dir, f'{model}_default-passwords.txt')
		with open(user_file_path, 'w') as user_file:
			user_file.write('\n'.join(usernames))
		with open(pass_file_path, 'w') as pass_file:
			pass_file.write('\n'.join(passwords))

def process_files(input_dir, output_dir):
	for file_name in os.listdir(input_dir):
		print(f'Processing file {file_name}')
		file_path = os.path.join(input_dir, file_name)
		model, usernames, passwords = extract_credentials(file_path)
		save_credentials(model, usernames, passwords, output_dir)

# Input directory containing the text files
input_dir = "C:\\Users\\User\\Desktop\\out\\portforward.com"
# Output directory where the output files will be saved
output_dir = "C:\\Users\\User\\Github\\SecLists\\Passwords\\Default-Credentials\\Routers"
process_files(input_dir, output_dir)
```
2024-04-05 15:26:08 +01:00
g0tmi1k
babab451e7
Merge pull request #1001 from molangning/patch-issues-template
Changed issues templates
2024-04-05 15:24:06 +01:00
g0tmi1k
4bca650afa
Merge pull request #1002 from molangning/patch-contributing-guidelines
Added more specifications
2024-04-05 15:23:11 +01:00
g0tmi1k
0fd0f18fb6
Merge pull request #1003 from molangning/patch-normalise-line-endings
Normalised line endings
2024-04-05 15:22:24 +01:00
GitHub Action
9385914f42 [Github Action] Automated readme update. 2024-04-05 14:21:59 +00:00
g0tmi1k
48aaf83f4a
Merge pull request #1004 from molangning/patch-normalise-folders
Rename folders
2024-04-05 15:20:52 +01:00
g0tmi1k
d15e6a4545
Merge pull request #990 from 0xjams/CVE-2023-51442
Added a JWT key used in CVE-2023-51442

Source: https://github.com/advisories/GHSA-wq59-4q6r-635r
2024-04-05 15:19:40 +01:00
Mo Langning
73f78c4133 Rename folders 2024-04-05 10:42:21 +00:00
Mo Langning
c6fa73c975 Normalised line endings 2024-04-05 10:26:17 +00:00
Mo Langning
6b4504b9df Added more specifications 2024-04-05 10:19:41 +00:00
Mo Langning
d9dd80b90a Changed templates 2024-04-05 10:12:47 +00:00
Ignacio J. Perez Portal
c84fcf055b
chore: Wording 2024-04-05 04:03:05 -03:00
Ignacio J. Perez Portal
9c80d344e1
chore: Fixed typo in router default-passwords README.md 2024-04-05 04:02:43 -03:00