The harness between AI agents and your cloud. Your agent gets a branch of your live AWS, tries changes, and gets a two sided diff and a pass/warn/block verdict from security, dependency, cost and limits lenses, before anything touches production. Read only. Open source.
The user sees text that doesn't exist = Chrome's font settings + a malicious OpenType font + an AI agent's legitimate permissions. Here's the full chain and why it's hard to operationalize.
WSTG tells you what to cover. This tells you what the tests inside each line actually are: the procedure, the oracle that separates a real result from the thing that imitates it, and where a success can lead. One offline, self-contained HTML file — no server, no install, no network.
🦂 Dune Phantom challenge writeups from the Ember Expanse, where logs shimmer, evidence disappears, and every investigation is a fight to separate signal from illusion.
Reconstruct real-world attack chains from individual vulnerability findings using LLM-powered reasoning
CLI framework for modeling & visualizing OWASP Top 10 attack chains with kill-chain mapping and automated report generation
NullAI Security Studio — 156+ tool AI-driven sovereign red teaming workstation. Neural attack chaining, real-time threat intel, Church of Malware arsenal, CRT aesthetic. Built on nullai.tech.
Authorized, non-destructive security assessment of my own 7-node cluster: rules of engagement, findings rated by severity and confidence, four attack chains, confirmed positive controls, and a prioritized remediation roadmap.
Production-grade SIEM engine built from scratch - Sigma detection, attack chain correlation, ML anomaly scoring, and STIX 2.1 export.
攻击链路径分析与可视化工具：超级源最短路径 / SPOF / 备用路径 / 检测盲区 / 封锁模拟（Python + NetworkX）
Exploit automation PoCs with workflow playbooks (lab-only)
To associate your repository with the attack-chain topic, visit your repo's landing page and select "manage topics."