PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

raink: Use LLMs for Document Ranking

bishopfox.com | blog | #ai-security | #open-source | #llm | #security-tools | #patch-analysis | #ranking-algorithm | #vulnerability-identification
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox open-sources raink, a CLI tool using listwise LLM ranking to solve fuzzy ordering — sorting all 1,445 TLDs, linking patch diffs to advisories — beyond plain chat prompts' abilities.
Published
Collected

Related coverage

tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · bishopfox.com
9 Red Team Tools For a Successful Red Teaming Engagement
Nine red team tools from Bishop Fox: CursedChrome for browser hijacking, Universal Loader for cross-platform in-memory loading, Overlord for infrastructure automation, and Sliver's implant framework.
blog · bishopfox.com
Lessons Learned on Brute-forcing RMI-IIOP With RMIScout
RMIScout 1.4 adds RMI-IIOP support, SSL, invoke and list modes, and a localhost bypass for attacking exposed Java RMI interfaces — plus notes on brute-forcing RMI-IIOP method signatures.
blog · bishopfox.com
The Pen Testing Tools We’re Thankful for in 2020
Bishop Fox's favorite pen-testing tools of 2020: Nuclei for fast community-driven scanning, Spyse for security-focused OSINT, Smuggler for request smuggling, GoBuster, and other standouts.
blog · bishopfox.com
GitGot Tool Release
GitGot is a semi-automated, feedback-driven Bishop Fox tool that searches public GitHub data for sensitive secrets using blacklists, fuzzy matching and the GitHub Search API.
Back