OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...

hassh

"HASSH" - 一种用于 SSH 客户端和服务器的指纹识别方法。 注意：此 Corelight 仓库是应 Salesforce 的请求而创建的，以便其能够得到积极维护，因为 Salesforce 的原始仓库已不再维护。 "HASSH" 是一种网络指纹识别标准，可用于识别特定的客户端和服务器 SSH 实现。这些指纹可以以 MD5 指纹的形式轻松存储、搜索和共享。 HASSH 可以帮助解决什么问题： 可用于高度受控、充分了解的环境中，任何超出已知良好集合的指纹都会触发警报。 可以以比 IP 源更细的粒度检测、控制和调查暴力破解或撞库密码尝试——而 IP 源可能受到 NAT...

hassh

"HASSH" - SSHクライアントとサーバーのプロファイリング手法 「HASSH」は、特定のクライアントおよびサーバーSSH実装を識別するために使用できるネットワークフィンガープリント標準です。フィンガープリントはMD5フィンガープリントの形で簡単に保存、検索、共有できます。 HASSHは2018年にSalesforceで考案されました。しかし、このプロジェクトはもはやSalesforceによって積極的にメンテナンスされていません。オリジナルの作成者であるBen Reardon氏が、Corelightでアクティブなフォークを維持しています。 HASSHは何に役立つか：...

EUVD-2022-3113

Malicious code in bioql PyPI...

CVE-2018-14657

Keycloak 4.2.1.Final and 4.3.0.Final are affected by CVE-2018-14657. The root cause is an improper implementation of brute force detection when TOPT is enabled, resulting in the login protection not being enforced. Impact described across connected sources indicates brute force protection may not...

CVE-2018-14657

A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures...

PT-2018-12647 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak versions 4.2.1.Final, 4.3.0.Final Description: A flaw was found in the implementation of the Brute Force detection algorithm when TOPT is enabled, which will not enforce its protection measures. Recommendations: For Keycloak version...

Shadowsocks - Log File Command Execution

X41 D-Sec GmbH Security Advisory: X41-2017-008 Multiple Vulnerabilities in Shadowsocks ======================================= Overview -------- Confirmed Affected Versions: Latest commit 2ab8c6b on Sep 6 Confirmed Patched Versions: N/A Vendor: Shadowsocks Vendor URL:...

Shadowsocks Log Manipulation / Command Execution Vulnerability

Several issues have been identified, which allow attackers to manipulate log files, execute commands and to brute force Shadowsocks with enabled autoban.py brute force detection. Brute force detection from autoban.py does not work with suggested tail command. The key of captured Shadowsocks traff...