kratosminifilter

🛡️ Kratos Minifilter — Windowsカーネル アンチランサムウェアドライバ 防御セキュリティ研究プロジェクト — C++で開発されたWindowsミニフィルタドライバ。カーネルレベル（Ring 0）でランサムウェアをリアルタイムに検出・無力化します。 📋 目次 概要 アーキテクチャ 検出メカニズム フィンガープリントによるブラックリスト インストール 設定 制限事項 法的注意事項 概要 Kratos（Kratos.sys）は、フィルタマネージャ（fltmgr.sys）を介して高度 425342...

RvbbitSafe

RvbbitSafe: ハッカーの悪夢 – Windows向け6つの要塞からなるアンチランサムウェアアーキテクチャ 🛡️ 概要 RvbbitSafeは、ランサムウェア防御におけるパラダイムシフトを示す研究プロトタイプです。ハードウェア仮想化、AI駆動の欺瞞、低レベルデータ復旧、分散型脅威インテリジェンス、そしてニューロシンボリックAIエンジン を組み合わせた、能動的かつ多層的な要塞であり、ランサムウェア攻撃の成功を経済的・技術的に不可能にします。 このプロジェクトは、最先端の学術研究を単一の実用的なフレームワークに統合した成果であり、ハッカーの悪夢...

RansomLord

RansomLord NG v1.0 アンチランサムウェアエクスプロイトツール。 ランサムウェアの暗号化前を悪用するためのPEファイル作成を自動化するProof-of-conceptツール。 更新版NG: https://github.com/malvuln/RansomLord/releases/tag/v1.0 言語: C SHA256: ACB0C4EEAB421761B6C6E70B0FA1D20CE08247525641A7CD03B33A6EE3D35D8A Deweaponize機能のPoC動画 NG v1.0 2025:...

detect-ransomware-filenames

检测勒索软件文件名 这个包/脚本监视 SMB 事务，查找勒索软件已知会使用的恶意文件名。它构建在此处维护的反勒索软件文件系统资源管理器列表（Anti-Ransomware File System Resource Manager Lists）之上。 使用方法 包含一个 Python 脚本（download-list.py），以便定期刷新列表。默认情况下，它会将新文件下载到 inputs/ 文件夹中。 安装 该包可通过 zkg 获取，但由于它包含两部分（脚本和输入文件），通常手动安装更好。 适用于 Zeek 对于 Zeek，请将...

CVE-2026-5966

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

CVE-2026-5967

ThreatSonar Anti-Ransomware (TeamT5) is affected by a Privilege Escalation vulnerability. The description states that authenticated remote attackers with shell access can inject OS commands and execute them with root privileges, indicating a post-authentication, command-injection path that could ...

CVE-2026-5966

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

CVE-2026-5966 TeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File Deletion

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

PT-2026-33732

Name of the Vulnerable Software and Affected Versions ThreatSonar Anti-Ransomware versions prior to 4.0.0 Description Authenticated remote attackers with shell access can inject and execute OS commands with root privileges. This issue involves an OS command injection in an unknown function...

CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-2441 CVSS score: 8.8 - A use-after-free...

Hackers Dox ICE, DHS, DOJ, and FBI Officials

Plus: A secret FBI anti-ransomware task force gets exposed, the mystery of the CIA’s Kryptos sculpture is finally solved, North Koreans busted hiding malware in the Ethereum blockchain, and more...

EUVD-2020-27176

Malware in sbrugna...

EUVD-2020-30270

Malware in sbrugna...

EUVD-2020-21336

Malware in sbrugna...

EUVD-2020-27177

Malware in sbrugna...

EUVD-2025-15660

Malicious code in bioql PyPI...

EUVD-2024-48579

Malicious code in bioql PyPI...

CVE-2025-7145

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...

CVE-2025-7145 TeamT5｜ThreatSonar Anti-Ransomware - OS Command Injection

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...

CVE-2025-7145

CVE-2025-7145 concerns ThreatSonar Anti-Ransomware from TeamT5. The vulnerability is described as an OS Command Injection that allows remote attackers with intermediate privileges on the affected product to inject and execute arbitrary OS commands on the server, potentially gaining administrative...