JanosAudran/financial-reports-sec
Viewer
•
Updated
•
21M
•
313
•
65
Efe Celik
efecelik
AI & ML interests
NLP, LLM
Recent Activity
liked
a dataset
23 days ago
JanosAudran/financial-reports-sec
liked
a dataset
about 1 month ago
turkish-nlp-suite/InstrucTurca
liked
a model
about 1 month ago
nvidia/Llama-3.1-Nemotron-70B-Instruct
Organizations
efecelik's activity
liked
a
dataset
23 days ago
liked
a
dataset
about 1 month ago
liked
a
model
about 1 month ago
upvoted
an
article
about 2 months ago
Article
Welcome, Gradio 5
•
72
liked
a
model
about 2 months ago
liked
a
dataset
about 2 months ago
liked
a
model
about 2 months ago
liked
a
dataset
3 months ago
liked
a
model
3 months ago
Reacted to
Csplk's
post with ➕
3 months ago
Post
2269
# Offensive Security Reconnaissance Continued with Public Facing Industrial Control System HMIs using Moondream
Building on my previous experiments with Moondream for physical security reconnaissance planning automation (https://huggingface.co/posts/Csplk/926337297827024), I've now turned my attention to exploring the potential of this powerful image-text-text model for offensive security reconnaissance in the realm of Industrial Control Systems (ICS).
ICS HMIs (Human-Machine Interfaces) are increasingly exposed to the public internet, often without adequate security measures in place. This presents a tantalizing opportunity for malicious actors to exploit vulnerabilities and gain unauthorized access to critical infrastructure.
Using Moondream with batch processing ( Csplk/moondream2-batch-processing), I've been experimenting with analyzing public facing ICS ( Csplk/ICS_UIs) HMI ( Csplk/HMI) screenshots from shodan to identify types of exposed ICS system HMIs, how they are operated and how malicious actors with access to these systems could cause damage to physical infrastructure. Feeding images of HMIs and pre-defined text prompts to Moondream batch processing successfully (unconfirmed accuracy levels) extracted information about the underlying systems, including
1. **System type**
2. **Possible Operation Details**
3. **Malicious Actor Outcomes**
Next steps:
* I have a longer and more in depth blog write up in the works that will cover the previous and this post's approaches for experiments for sharing via HF community blog posts soon.
* I plan to continue refining my Moondream-based tool to improve its accuracy and effectiveness in processing public facing ICS HMIs.
* As mentioned before, offensive security with moondream focused HF Space once its fleshed out.
Thanks again to @vikhyatk for the incredible Moondream model. vikhyatk/moondream2
Building on my previous experiments with Moondream for physical security reconnaissance planning automation (https://huggingface.co/posts/Csplk/926337297827024), I've now turned my attention to exploring the potential of this powerful image-text-text model for offensive security reconnaissance in the realm of Industrial Control Systems (ICS).
ICS HMIs (Human-Machine Interfaces) are increasingly exposed to the public internet, often without adequate security measures in place. This presents a tantalizing opportunity for malicious actors to exploit vulnerabilities and gain unauthorized access to critical infrastructure.
Using Moondream with batch processing ( Csplk/moondream2-batch-processing), I've been experimenting with analyzing public facing ICS ( Csplk/ICS_UIs) HMI ( Csplk/HMI) screenshots from shodan to identify types of exposed ICS system HMIs, how they are operated and how malicious actors with access to these systems could cause damage to physical infrastructure. Feeding images of HMIs and pre-defined text prompts to Moondream batch processing successfully (unconfirmed accuracy levels) extracted information about the underlying systems, including
1. **System type**
2. **Possible Operation Details**
3. **Malicious Actor Outcomes**
Next steps:
* I have a longer and more in depth blog write up in the works that will cover the previous and this post's approaches for experiments for sharing via HF community blog posts soon.
* I plan to continue refining my Moondream-based tool to improve its accuracy and effectiveness in processing public facing ICS HMIs.
* As mentioned before, offensive security with moondream focused HF Space once its fleshed out.
Thanks again to @vikhyatk for the incredible Moondream model. vikhyatk/moondream2
upvoted
an
article
3 months ago
Article
How to communicate in a Pull Request?
By
•
•
18
liked
a
Space
3 months ago
liked
2
datasets
3 months ago
upvoted
2
articles
3 months ago
Article
Merge Large Language Models with mergekit
By
•
•
82Article
A failed experiment: Infini-Attention, and why we should keep trying?
•
50
upvoted
a
collection
3 months ago
upvoted
an
article
3 months ago
Article
Fine-Tune Whisper with 🤗 Transformers
•
120
Reacted to
ezgikorkmaz's
post with 👀
3 months ago
Post
1270
If you are interested in deep reinforcement learning, find my recent survey below:
A Survey Analyzing Generalization in Deep Reinforcement Learning
Paper: https://arxiv.org/pdf/2401.02349
GitHub: https://github.com/EzgiKorkmaz/generalization-reinforcement-learning
A Survey Analyzing Generalization in Deep Reinforcement Learning
Paper: https://arxiv.org/pdf/2401.02349
GitHub: https://github.com/EzgiKorkmaz/generalization-reinforcement-learning
upvoted
an
article
3 months ago
Article
Context Parallelism
By
•
•
9