Initial Access Intelligence

None

HTML

A Security Operations Center (SOC) dashboard built in Splunk to monitor Apache logs for Shellshock and XSS attacks.

CVE-2026-3854 patch bypass testing

A proof-of-concept exploit for **CVE-2026-30824**, a critical authentication bypass vulnerability in Flowise that exposes NVIDIA NIM API endpoints without authentication.

Python

None

JAXEN is a stateful, Go-based reconnaissance framework designed to map modern enterprise attack surfaces. Powered by Shodan + local SQLite DB, it specializes in AI/LLM infrastructure hunting, enterprise gateway enumeration (Menlo Security), continuous diffing, and deep TLS certificate forensics.

ai-infrastructure certificate-analysis cloud-security enterprise-security osint reconnaissance shodan threat-hunting nicholas-kloster bug-bounty cli golang nuclide pentest red-team visor

Go Python

大语言模型反代管理 & API端点提供

Ruby Shell Dockerfile HTML PowerShell JavaScript Rust CSS TypeScript

AI-RECON is a specialized reconnaissance tool designed to identify, fingerprint, and enumerate AI/ML infrastructure. It goes beyond traditional scanners by detecting model-serving frameworks, vector databases, and LLM runtimes, mapping their exposed APIs, metadata, and potential vulnerabilities to reveal the full AI attack surface.

Python

Multi-threaded network security scanner — scans IPs/CIDR ranges for open ports, maps findings to CVEs, scores host risk (low→critical), and auto-generates a prioritized remediation plan with step-by-step fix commands. Built with raw TCP sockets and ThreadPoolExecutor. Outputs text + JSON reports.

Python

None

Java