50 matches found
AIL-framework
AIL Framework 非構造化情報の収集、クロール、処理、分析のためのオープンソースフレームワーク。 AILフレームワークは、クリアウェブ、Tor、I2P、チャット、ファイル、外部フィードから非構造化データを収集、クロール、処理、分析 するためのオープンソースプラットフォームです。 CIRCLで最初に開発されたAILは、アナリストが抽出、タグ付け、検出、相関、調査ワークフローを通じて、生の雑然としたコンテンツを構造化されたインテリジェンスに変換するのに役立ちます。 AILとは？ https://ail-project.org AIL Analysis of Information...
the-art-of-pivoting
枢轴的艺术 情报分析师在复杂世界中发掘新关系的技术 PDF HTML EPUB Markdown 摘要 本书探讨情报与网络安全分析师如何通过围绕经典和非常规指标（其中许多常被忽视）进行枢轴分析，来发现威胁行为者基础设施与正在进行的调查之间的隐藏关联。书中的内容植根于网络安全、数字取证、网络威胁情报以及更广泛的情报分析中经过实践检验的经验性策略。 我们的目标是为分析师提供一套实用的分析方法工具包，并辅以真实案例，以增强调查工作流，同时不将分析师局限于单一的思维模式、严格的模型或过于僵化的技术策略。相反，本书鼓励创造性的探索、数据驱动的推理，以及利用多样化的数据点——从传统 IOC...
ail-typo-website
ail-typo-website ail-typo-squatting 库的网站。该网站深受 dnstwist 网站 的启发。 依赖 requests flask flask-restx werkzeug ail-typo-squatting idna redis tldextract pymisp beautifulsoup4 nltk scikit-learn 如何运行 需要运行的主脚本是 Flaskserver.py，但你可以从以下步骤开始： 填写 conf/conf.cfg 如果你想使用一些 misp-warninglists 运行...
ail-typo-squatting
ail-typo-squatting ail-typo-squatting 是一个 Python 库，用于通过域名置换引擎生成潜在域名拼写错误（typo squatting）列表，以馈送给 AIL 及其他系统。 该工具既可以作为独立工具使用，也可以用于向其他系统提供数据。 如果你不想使用该 Python 库，https://typosquatting-finder.circl.lu/ 是一个在线服务，它正是基于该库构建的。 依赖要求 Python 3.6+ inflect 库 pyyaml tldextract dnspython 安装 源码安装 ail-typo-squatting...
CVE-2026-76164
AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...
CVE-2026-76164 Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...
EUVD-2026-62366
AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...
CVE-2026-76164 Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...
CVE-2026-76164
CVE-2026-76164 is a non-blind SSRF in the AIL Framework crawler submission functionality. A low-privileged authenticated user can submit arbitrary URLs for crawling without adequate destination validation. Manual crawler tasks bypass the existing domain blacklist (assigned non-zero priority), and...
CVE-2026-71446
The CVE-2026-71446 vulnerability affects the AIL Framework, specifically the crawler domain view where crawled URLs are embedded directly into a JavaScript onclick handler for the stored screenshot feature. The root cause is inadequate encoding of the stored URL, allowing an attacker to inject Ja...
CVE-2026-71446 Stored Cross-Site Scripting in AIL Framework Domain Screenshot View
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
CVE-2026-71446 Stored Cross-Site Scripting in AIL Framework Domain Screenshot View
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
CVE-2026-71445 Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...
CVE-2026-71445
The CVE-2026-71445 entry concerns AIL Framework. It describes an authenticated reflected cross-site scripting flaw in the /tag/add_tags endpoint, where an error message is emitted directly as HTML via str(res[0]), allowing attacker-controlled input to be reflected without proper encoding. Exploit...
CVE-2026-59510 Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read
AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717c48ea903706abecdf2, the PDF.getfilepath function constructed a file path by joining the configured PDF storage directory with a path derived from a PDF object identifier, withou...
CVE-2026-59510 Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read
AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717c48ea903706abecdf2, the PDF.getfilepath function constructed a file path by joining the configured PDF storage directory with a path derived from a PDF object identifier, withou...
EUVD-2026-38238
A path traversal vulnerability exists in AIL Framework before the release containing commit 0041456af25da0cdea1c1c4624e46baff2731d8f. An authenticated AIL user can supply crafted object identifiers through the investigation workflow to cause file paths to resolve outside the intended image,...
CVE-2026-56448 Authenticated Path Traversal in AIL Framework Investigation Downloads Allows Arbitrary File Read
A path traversal vulnerability exists in AIL Framework before the release containing commit 0041456af25da0cdea1c1c4624e46baff2731d8f. An authenticated AIL user can supply crafted object identifiers through the investigation workflow to cause file paths to resolve outside the intended image,...
CVE-2026-56448 Authenticated Path Traversal in AIL Framework Investigation Downloads Allows Arbitrary File Read
A path traversal vulnerability exists in AIL Framework before the release containing commit 0041456af25da0cdea1c1c4624e46baff2731d8f. An authenticated AIL user can supply crafted object identifiers through the investigation workflow to cause file paths to resolve outside the intended image,...
CVE-2026-56448
CVE-2026-56448 involves a path traversal in the AIL Framework. An authenticated user can craft object identifiers via the investigation workflow, causing path components to be joined with storage paths without ensuring the final path stays in the intended image/favicon/screenshot directories. Thi...