log4j-honeypot-flask

log4j-honeypot-flask 내부 네트워크 허니팟으로, 공격자나 내부 위협이 log4j CVE-2021-44228에 대해 네트워크를 스캔하는지 탐지합니다. 이 도구는 워크스테이션이나 서버에 설치할 수 있으며, Python 스크립트 app/app.py를 직접 실행하거나python3, Flask, Requests 필요 Docker 컨테이너로 실행할 수 있습니다. 다음과 같은 환경 변수를 설정해야 합니다또는 스크립트에 하드코딩: WEBHOOKURL=알림을 받을 Teams, Slack 또는 Mattermost 웹훅 URL...

chameleon

19개의 커스터마이징 가능한 허니팟으로 네트워크 트래픽, 봇 활동, 사용자명\비밀번호 자격 증명을 모니터링합니다 DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic, ldap 프로젝트에 허니팟을 구현하려면 QeeqBox honeypots를 확인하세요. Chameleon은 매우 효과적인 것으로 간주됩니다. 이는 능동적인 방어 도구입니다. 시스템이 열려 있고 보호되...

Red-Team-Infrastructure-Wiki

このWikiは、堅牢なRed Teamインフラストラクチャを構築するためのリソースを提供することを目的としています。Steve Borosh（@424f424f）とJeff Dimmock（@bluscreenofjeff）によるBSides NoVa 2017の講演「Doomsday Preppers: Fortifying Your Red Team Infrastructure」（スライド）を補完するために作成されました。 追加したい内容がある場合は、Pull Requestを送信するか、リポジトリにIssueを登録してください。...

propox

Propox 🛡️🚀 Propox 는 Rust로 작성된 고성능, 안전하며 관찰 가능한 HTTP/HTTPS 프록시입니다. 고급 보안 메커니즘을 사용하여 악의적인 클라이언트로부터 적극적으로 방어하면서 높은 처리량의 트래픽을 처리하도록 설계되었습니다. ✨ 주요 기능 🚀 극한의 성능 최적화된 동시성 : 비차단 I/O를 위해 Tokio 와 Hyper 기반. Lock-Free 상태 : 핫 경로에서 락 경합을 제거하기 위해 DashMap 사용. 연결 풀링 : 백엔드 TCP 연결 재사용 Keep-Alive. 벤치마크 : 표준 모드 : 14,00...

clawguard

🦞 ClawGuard v3 エンタープライズAIエージェントセキュリティツールキット - SKILL.md駆動型アクティブディフェンス 核心理念 ClawGuard v3の防御の中核はコードではなく、SKILL.mdにあります！ 各モジュールのSKILL.md自体が完全な防御ガイドです： エージェントにいつトリガーするか を指示 エージェントにどのように検出するか をガイド 具体的な検出パターンとルール を提供 出力形式と判断基準 を定義 コードスクリプトは補助ツールに過ぎず、本当の知性はSKILL.mdにあります。 🎯 5つのセキュリティモジュール モジュール| 位置|...

Deep-Fake CAPTCHA: Mitigating Next-Generation Social Engineering Attacks

This paper presents DF-CAPTCHA, an active defense against real-time deepfake impersonation in voice and video calls. Instead of passively searching for artifacts, DF-CAPTCHA prompts the caller to perform simple challenge-response tasks that are easy for humans but difficult for current real-time...

Beyond the basics: Implementing an active defense

Active defense a key approach to protecting against major threats Having an active defense posture, where the defenders actively use threat intelligence and their own environment telemetry to uncover potential compromises, is the next stage in the cyber security maturity road. Instead of waiting...

Detecting Credential Stealing Attacks Through Active In-Network Defense

ARCHIVED STORY Detecting Credential Stealing Attacks Through Active In-Network Defense By Trellix · September 22, 2021 This blog was written by Chintan Shah Executive Summary Today, enterprises tend to use multiple layers of security defenses, ranging from perimeter defense on network entry point...

Detecting Credential Stealing Attacks Through Active In-Network Defense

ARCHIVED STORY Detecting Credential Stealing Attacks Through Active In-Network Defense By Chintan Shah · September 22, 2021 Executive Summary Today, enterprises tend to use multiple layers of security defenses, ranging from perimeter defense on network entry points to host based security solution...

Shenzhen DiYuan Technology Co., Ltd D Shield_Firewall has dll hijacking vulnerability

D ShieldFirewall is an active defense protection software designed for IIS. Ltd. D ShieldFirewall has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

Active Defense Bypass Vulnerability in SmartMass Endpoint Security

Wizards Endpoint Security is a professional and practical artificial intelligence-based antivirus software. Wise Terminal Security has an active defense bypass vulnerability that can be exploited by attackers to cause a program crash...

Active Defense Bypass Vulnerability in the Core Component of SmartMass Endpoint Security

Wisdom Terminal Security, Wisdom Terminal Security is a computer system security and protection software newly developed in 2018. There is an active defense bypass vulnerability in the core component of Wise Terminal Security, which can be exploited by attackers to construct malformed PE samples...

D Shield of Shenzhen DiYuan Technology Co., Ltd. suffers from webshell bypass vulnerability (CNVD-2020-23537)

D ShieldFirewall is an active defense protection software designed for IIS. D-Shield has a webshell bypass vulnerability, which can be exploited by attackers to bypass detection and gain access to the control privileges of the target server...

Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18728)

D-ShieldFirewall is an active defense protection software designed specifically for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of...

Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18724)

D-ShieldFirewall is an active defense protection software specially designed for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of all...

Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18722)

D-ShieldFirewall is an active defense protection software specially designed for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of all...

Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18726)

D-ShieldFirewall is an active defense protection software designed specifically for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of...

Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18729)

D-ShieldFirewall is an active defense protection software specially designed for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of all...

Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18712)

D-ShieldFirewall is an active defense protection software specially designed for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of all...

Webshell Bypass Vulnerability in D-Shield_Firewall

D-ShieldFirewall is an active defense protection software designed for IIS, to protect websites and servers from intrusion by internal and external protection. D-ShieldFirewall has a webshell bypass vulnerability that can be exploited by an attacker to gain control of the target server...