armory

dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM 描述...

datasploit

工具概述： 对域名/邮箱/用户名/电话号码进行 OSINT，从不同来源获取信息。 关联并整合结果，以统一的方式显示。 尝试查找与目标相关的凭据、API 密钥、令牌、子域名、域名历史、遗留门户等。 使用特定脚本/启动自动化 OSINT 以整合数据。 对收集的数据进行主动扫描。 生成 HTML、JSON 报告以及文本文件。 基本用法： / / / / / / / / / // // // // // \ / // \ / // / / // // // // / / // / / // // // // // // / ,/ ,/ / ,//// ./// /// / // 开源...

spiderfoot

SpiderFoot 是一款开源情报（OSINT）自动化工具。它集成了几乎所有可用的数据源，并利用多种方法进行数据分析，使数据易于浏览。 SpiderFoot 内置了一个 Web 服务器，提供简洁直观的 Web 界面，同时也可以完全通过命令行使用。它使用 Python 3 编写，采用 MIT 许可证 。 功能 基于 Web 的用户界面或命令行 超过 200 个模块（见下文） Python 3.7+ 支持 YAML 配置的关联引擎，包含 37 条预定义规则 CSV/JSON/GEXF 导出 密钥导出/导入 SQLite 后端，支持自定义查询 高度可配置 文档齐全 可视化 集成...

datasploit

工具概述： 对域名/电子邮件/用户名/电话号码进行OSINT，并从不同来源查找信息。 关联和整合结果，以统一的方式展示。 尝试查找与目标相关的凭证、API密钥、令牌、子域名、域名历史、遗留门户等。 使用特定脚本/启动自动OSINT以整合数据。 对收集的数据执行主动扫描。 生成HTML、JSON报告以及文本文件。 基本用法： / / / / / / / / / // // // // // \ / // \ / // / / // // // // / / // / / // // // // // // / ,/ ,/ / ,//// ./// /// / // Open...

Governing Claude Enterprise in Environments Where Inline Controls Can't Go

TrendAI™ integrates Anthropic's Claude Compliance API into TrendAI Vision One™ through two collectors that bring AI-aware visibility and detection to Claude Enterprise usage: one keeps all data inside the environment, while the other feeds TrendAI Vision One™ for deeper correlation and compliance...

CVE MCP Server 0.1.0

CVE MCP Server is a production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds...

A Collaborative Intrusion Detection System Using Snort IDS Nodes

Intrusion Detection Systems IDSs are integral to safeguarding networks by detecting and responding to threats from malicious traffic or compromised devices. However, standalone IDS deployments often fall short when addressing the increasing complexity and scale of modern cyberattacks. This paper...

CVE-2024-47043

Ruijie Reyee OS vulnerable versions 2.206.x up to but not including 2.320.x fail to securely store/change credentials and expose customer data. Root causes include a weak password-change mechanism and a feature that could allow sub-accounts or attackers to view/exfiltrate sensitive information fr...

Rapid7 Recognized in Forrester’s 2024 Attack Surface Management (ASM) Wave Report

This week, Rapid7 was recognized as a Contender in Forrester’s report, The Forrester WaveTM: Attack Surface Management ASM Solutions Q3 2024. We’re proud to have been selected for inclusion in the report, which to us reflects a continued dedication to enabling customers to: Monitor 100% of their...

Meet unprecedented security challenges by leveraging MXDR services

We know customers of every size face ever-increasing security risks. In just the last 12 months the speed of attackers leveraging breaches is also increasing, as it only takes 72 minutes on average for an attacker to access private data from the time a user falls victim to a phishing email.1 Data...

CVE-2022-35888

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system...

Akamai's Polymorphic AI Framework Preemptively Manages Bots

Too many security efforts react to threats as they come. While security teams often succeed through Herculean efforts, being constantly under siege takes its toll on your resources. The relentless barrage of bot attacks will eventually crack the human- and system-based methods to block or mitigat...

Beyond the Endpoint: Why Organizations are Choosing XDR for Holistic Detection and Response

The endpoint has long been a major focal point for attackers targeting enterprise IT environments. Yet increasingly, security bosses are being forced to protect data across the organization, whether it’s in the cloud, on IoT devices, in email, or on-premises servers. Attackers may jump from one...

OSSAMS - Open Source Security Assessment Management System

OSSAMS - Open Source Security Assessment Management System As information security professionals, we conduct security assessments for companies. One of the biggest problems we have is after all the data is collected, how can we correlate the data accurately. So we decided to start a project to...