ai-exploits is a collection of exploits and scanning templates for responsibly disclosed vulnerabilities affecting machine learning tools.

Obfu[DE]scate is a Python tool designed to simplify the process of de-obfuscating and comparing two versions of an Android APK

autotimeliner automagically extract forensic timeline from volatile memory dumps. It Identify corrects volatility profile for the memory image.

STRIDE GPT is an AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models and attack trees

EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines.

Deepfake Offensive Toolkit is created for performing penetration testing against e.g. identity verification and video conferencing systems

WPProbe is a fast and efficient WordPress plugin scanner that leverages REST API enumeration (?rest_route) to detect installed plugins without brute-force.

Web shell analyzer is a cross platform tool for the purpose of identifying, decoding, and tagging files that are suspected to be web shells

While using scheduled tasks as a means of persistence is not a novel approach, threat actors have employed various techniques

North Korean threat group Slow Pisces targets crypto developers with fake job offers and malicious coding challenges. Learn how they steal millions

An IEA report reveals AI's growing energy demands, projecting data center electricity use to more than double by 2030, impacting global emissions targets.

GPT-4 retires in ChatGPT as OpenAI shifts to GPT-4o, offering enhanced multimodal capabilities. Developers retain GPT-4 API access.

Fortinet warns of a novel persistence exploit using symbolic links in FortiGate SSL-VPNs. Upgrade to patched FortiOS versions to mitigate the threat.

SSL certificate validity to drop to 47 days after Apple's proposal, impacting web security and increasing renewal frequency for enterprises.

OpenAI plans to introduce ID verification for API accounts to combat misuse, granting access to advanced AI models only to verified users.

CVE-2025-32428 flaw in Jupyter Remote Desktop Proxy exposes TigerVNC over the network. Patch to version 3.0.1 or switch to TurboVNC to mitigate.

Learn about Tor Browser, the Dark Web, and how to navigate it safely. This guide covers installation, configuration, security precautions, and the potential risks of exploring the dark web.

A critical vulnerability (CVE-2025-27840) in ESP32 microcontrollers threatens billions of IoT devices and the security of Bitcoin wallets. Exploits range from private key theft to forged transactions.

A widespread smishing campaign targeting toll road users across multiple U.S. states is stealing payment credentials. Learn how scammers are impersonating E-ZPass and other toll systems to trick victims

A fake npm package named pdf-to-office has been discovered injecting malicious code into Atomic and Exodus crypto wallets, redirecting funds and stealing data

TROX Stealer exploits urgency via phishing emails to deliver obfuscated MaaS malware that steals credit cards, browser data, and crypto wallets