Daily Edition · Page 15

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Repositories, courses and useful tools

Resources & Tools

SECTIV

Sectiv is a Burp Suite extension that runs captured proxy traffic past an LLM, guided by editable "skills" for IDOR, XSS, SQLi, and SSRF, and returns triaged findings with CVSS scores and HTML, Python, or curl PoCs. Testers can load two accounts to help the model reason about broken access control. It masks cookies, tokens, and JWTs before sending traffic to providers like OpenAI, Claude, DeepSeek, or a local Ollama model. Skills can be imported, exported, and tailored per target, and findings export to HTML, Markdown, or JSON for reporting.

SYNOLOGY-NAS-CLI

synology-nas-cli checks a Synology NAS for the exposures exploited in October's C3RB3R/.L0CK3D ransomware campaign: unpatched DSM builds, vulnerable SA-26:14 packages, QuickConnect and UPnP port forwarding, SMB1, ransom notes, and CVE-2024-10441 exploit traces. It shows each fix as a before-and-after dry-run plan, applies it, and reads every setting back to confirm. If encryption is already running, it can freeze the encryptor with SIGSTOP and capture its memory to recover keys. It's a zero-dependency Python CLI with an MCP server, so a Claude Code or Codex agent can run the audit end to end.

TLDR IndexPage 15