374 matches found
caldera-crater
Crater Crater ist der Caldera Rat. Es befindet sich im Ordner crater/. Kompilierung Crater erfordert Mono 64 Bit zum Erstellen. Sobald Mono installiert ist, wird Crater durch Ausführen von buildall.bat erstellt...
caldera-agent
CALDERA Agent Der Ordner calderaagent enthält den Quellcode des CALDERA-Agenten bzw. cagent , eines Windows-Dienstes, der die Kommunikation zwischen dem CALDERA-Server und den CALDERA-Rats ermöglicht. Das cagent-Programm sollte auf jedem Computer installiert werden, der an der...
CVE-2021-42562
CVE-2021-42562: Fehlerhafte Zugriffskontrolle in MITRE Caldera Caldera Versionen =2.8.1 trennt Benutzerrechte nicht ordnungsgemäß, sodass Nicht-Admin-Benutzer Zugriff auf das Lesen und Ändern von Konfigurationen oder anderen Komponenten haben, die nur für Admin-Benutzer zugänglich sein sollten...
CVE-2021-42561
CVE-2021-42561: Injeção de Comando via o Plugin Human no MITRE Caldera No Caldera versões =2.8.1 o plugin Human passa o parâmetro name não sanitizado para uma função python "os.system". Isso permite que atacantes usem metacaracteres de shell por exemplo, crases "" ou parênteses com cifrão "$" par...
CVE-2021-42560
CVE-2021-42560: تحليل XML غير آمن في MITRE Caldera تستقبل إضافة Debrief في Caldera الإصدارات =2.9.0 معاملات "SVG" مشفرة بـ base64 عند إنشاء ملف PDF. يتم تحليل هذه الـ SVG بطريقة غير آمنة ويمكن استغلالها في هجمات XXE مثل: تسريب الملفات، تزوير الطلبات من جانب الخادم، الاستخراج خارج النطاق، وما إلى...
CVE-2021-42559
CVE-2021-42559: Injeção de Comandos via Configurações no MITRE Caldera Caldera versões =2.8.1 contém vários "requisitos" de inicialização que executam comandos ao iniciar o servidor. Como esses comandos podem ser alterados via Rest API, um usuário autenticado pode inserir comandos arbitrários que...
CVE-2021-42558
CVE-2021-42558: Mehrere Cross-Site-Scripting-Schwachstellen in MITRE Caldera Caldera Versionen =2.8.1 enthält mehrere reflektierte, persistente und Self-XSS-Schwachstellen, die sowohl von authentifizierten als auch nicht authentifizierten Angreifern ausgenutzt werden können. Offenlegung durch den...
Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting
Caldera Forms WordPress plugin 1.9.7 contains a reflected cross-site scripting caused by lack of validation and escaping of the cf-api parameter in responses, letting attackers execute arbitrary scripts in victim's browser, exploit requires attacker to craft a malicious request. id: CVE-2022-0879...
zeek-caldera-detector
zeek-caldera-detector zeek-caldera-detector एक Zeek-आधारित पैकेज है जो Caldera बीकन और एजेंट डाउनलोड का पता लगाने के लिए है। इसे Caldera C2 फ्रेमवर्क से जुड़ी संदिग्ध गतिविधियों की पहचान करने के लिए डिज़ाइन किया गया है, जिनमें Sandcat, Ragdoll, और Manx शामिल हैं। यह पैकेज HTTP ट्रैफ़िक की निगरानी...
soc-automation-lab
Laboratório de Automação SOC Este repositório documenta o design, a lógica de detecção, os fluxos de automação e as lições aprendidas ao construir uma demo de SOC automatizada usando ferramentas de código aberto. O projeto foca em como os alertas passam da detecção para a investigação e notificaç...
atomic-red-team
Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...
CVE-2001-1576
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument...
CVE-2022-0879
The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting...
CVE-1999-0712
A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...
The vulnerability of the Manx and Sandcat plugins in the Caldera automated system for emulating intruder actions allows an intruder to execute arbitrary code.
The vulnerability of the Manx and Sandcat plugins in the Caldera intrusion simulation software involves a lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Bounty Hunter: Autonomous, Comprehensive Emulation of Multi-Faceted Adversaries
Adversary emulation is an essential procedure for cybersecurity assessments such as evaluating an organization's security posture or facilitating structured training and research in dedicated environments. To allow for systematic and time-efficient assessments, several approaches from academia an...
EUVD-2021-11808
Malware in sbrugna...
EUVD-2002-0879
Malware in sbrugna...