blackhat-arsenal 开源项目推荐（12 个）

Galeax /CVE2CAPEC

从CVE列表生成MITRE AT&CK和D3FEND。包含CVE、CWE、CAPEC、MITRE ATT&CK D3FEND和ATLAS技术数据的数据库每日更新。在2025年BlackHat Europe Arsenal展会上亮相。

elbraino /awesome-blackhat-arsenal

Curated collection of cybersecurity tools featured in Black Hat Arsenal events.

seedon198 /Farsight

Recon and Threat Intelligence Framework | BlackHat Sector Arsenal - 2025 | DEFCON 34 AppSec Village - 2026

Agentic-AI-Risk-Mitigation /Janus

System-level security for LLM agents: fine-grained policy enforcement on tool calls to defend against indirect prompt injection

Telefonica /AgentHound

BloodHound-style risk analysis for multi-agent AI architectures. Parses CrewAI, Dify, LangGraph, or generic YAML into a typed capability graph and detects reachable attack paths from untrusted input to sensitive data or external action, with live control simulation.

Cdude1909 /UEFI-DISK-CLONER

This tool enables bit-perfect imaging of storage devices in air-gapped, locked, or tamper-sensitive environments without requiring any operating system credentials.

theAstiv /paranoid

Self-hosted, iterative STRIDE + MAESTRO threat modeling with LLMs and a deterministic fallback, plus a dependency capability engine for npm.

elblaxican /WormGPT

WormGPT is a malicious AI tool promoted on the dark web as the adversary of ChatGPT. It automates the creation of convincing personalized fake emails, aiding in activities like phishing and malware installation.

FranchiseSmth /farsight

Deliver automated, structured research reports using AI to analyze questions, compare competitors, and generate detailed insights with citations.

d01ki /PatchTriage

Auditable AI patch triage: deterministic exploitation signals (EPSS/KEV/SSVC) in, machine-verified LLM decisions out

ADITYA02NM /ULTRON

Zero-cloud smart-house IoT security ecosystem on 3x Raspberry Pi + 2x ESP32 (~$290). Lean detection, weighted risk governance, alert management. Phase 1 is notify-only - no cloud, no honeypots, no active scanners.

Ani07-05 /rehub-engine

Local offline OT investigation engine: Zeek, Suricata, tshark and PLC logic correlation