SniperRoost

SniperRoost Wird verwendet, um eine gültige Angriffskette zu generieren, die CVE-2017-11774 ausnutzt, verbunden mit der iranischen APT. Nur zu Forschungszwecken PoC. Bitte nicht für schädliche Zwecke verwenden...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Lokale Privilegienausweitung CVE-2026-14459 & CVE-2026-14460 Proof-of-concept- und exploitbereiter Code für zwei lokale Privilegienausweitungsprobleme im pardus-software-Paket Pardus Software Center Version 1.0.4 , beide behoben in 1.0.5. CVE| Klasse| Zusammenfassung| CVS...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 è una vulnerabilità critica di path traversal in WinRAR che permette l'esecuzione di codice arbitrario. Attualmente sfruttata da APT groups come GOFFEE, Bitter APT-C-08 e Gamaredon. 📋...

APT-Backpack

APT-Backpack CVE più comuni utilizzati dagli APT, RAT legittimi e altri strumenti usati dagli avversari CVE CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Lettura file non autenticata CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFle...

check_CVE-2019-3462

Controlla @Debian e @Ubuntu GNU / Linux per CVE-2019-3462 in APT...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

awesome-threat-intelligence

awesome-threat-intelligence Una lista curata di risorse awesome per la Threat Intelligence Una definizione concisa di Threat Intelligence: conoscenza basata su prove, inclusi contesto, meccanismi, indicatori, implicazioni e consigli praticabili, riguardo a una minaccia o un pericolo esistente o...

CyberThreatIntel

CyberThreatIntel Analyse von Malware und Cyber Threat Intelligence zu APT- und Cyberkriminellen-Gruppen Zusammenfassung 2020-01-20 - Transparent Tribe APT 2020-01-03 - MAAS Terraloader 2019-12-28 - SideWinder gleiche Ziele, gleiche TTPs, Zeit für den Gegenangriff! 2019-11-18 - APT33 greift...

whodunit

whodunit Riconoscimento dei gruppi APT più probabili responsabili di un incidente Descrizione Questo programma prende un report di un incidente di cybersicurezza contenente le tecniche MITRE ATT&CK che sono state rilevate come utilizzate nell'incidente e cerca di riconoscere quali gruppi APT hann...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

katoolin3

katoolin3 Katoolin3 porta tutti i programmi disponibili in Kali Linux su Debian e Ubuntu. Descrizione Questo programma è una conversione di katoolin di LionSec a python3. Katoolin3 offre vari miglioramenti rispetto a katoolin: Pacchetti aggiornati Il vecchio katoolin utilizza un elenco di pacchet...

Breach-Report-Collection

Raccolta di report sulle violazioni Una raccolta di aziende che rendono pubbliche le TTP degli avversari dopo essere state violate Utile per l'analisi di intrusioni lanciate da avversari con effetti e impatto misurabili Organizzazione| Data della violazione| Avversario| Fonte ---|---|---|---...

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S. Thes...

yara-rules

yara-rules Raccolta di firme YARA da recenti ricerche sul malware Set di regole Dacls Trojan Regola: DaclsLinux.yara Regola: DaclsWindows.yara Riferimento: https://blog.netlab.360.com/dacls-the-dual-platform-rat/ APT32 KerrDown Regola: APT32KerrDown.yara Riferimento:...

CVE-2026-52817

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...

CVE-2026-52817 Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...

CVE-2026-52817 Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...

CVE-2026-52817

In Linuxfabrik Monitoring Plugins prior to 5.1.0, the Debian.sudoers file allowed the nagios/icinga account to run /usr/bin/apt-get as root with unrestricted arguments. An attacker with the monitoring account can execute sudo apt-get update -o APT::Update::Pre-Invoke::="/bin/sh" to obtain a root ...

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Cybersecurity researchers have traced the continued evolution of the Cavern aka Cav3rn command-and-control C2 framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster...