Loki-RS

Loki-RS A rewrite of Loki in Rust. High-performance, multi-threaded YARA & IOC scanner in a single binary. Status : Beta. Works, but still under active development. Features YARA scanning of files and process memory yara-x IOC matching MD5/SHA1/SHA256 hashes, filename patterns, C2 indicators...

Loki

🧙‍♂️ Loki Command & Control Loki is a stage-1 command and control C2 framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion of security software and bypasses application controls by exploiting...

signature-base

Signature-Base Signature-Base is the YARA signature and IOC database for our scanners LOKI and THOR Lite Focus of Signature-Base 1. High quality YARA rules and IOCs with minimal false positives 2. Clear structure 3. Consistent rule format Directory Structure iocs - Simple IOC files CSV yara - YAR...

Loki

I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...

odin

Odin Odin is a central IoC scanner based on Loki Table of Contents General Info Requirements Fetching Deploying Loki Collecting Parsing General Info This application Loki latest version and download it on all machines using a powershell script and run it then this app receives the respose from al...

loki

Loki: like Prometheus, but for logs. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost effective and easy to operate. It does not index the contents of the logs, but rather a set of labels for each log...

loki-parse

loki-parse A python script that can detect and parse loki-bot malware related network traffic between a compromised host and a C2 server. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrated to the C2, bot tracking, etc... This scrip...

Loki

Loki LokiはシンプルなR emote A ccess T ool（リモートアクセスツール）です。 Lokiは、感染したマシンとの通信を保護するためにRSA-2048 とAES-256 を使用します。 免責事項 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND...

Cowrie and Grafana Honeypot using Terraform on DigitalOcean

Honeypot Cowrie y Grafana usando Terraform en DigitalOcean Video de demostración Tabla de contenidos Descripción general del sistema Tecnologías Estructura de directorios del proyecto Requisitos de hardware Instalación y configuración Gestión del estado de Terraform Pipeline de CI/CD Arquitectura...

loki

loki NCC Group Plc によりオープンソースとして公開 - http://www.nccgroup.com/ Dave Spencer によって開発（david dot spencer at nccgroup dot com） http://www.github.com/nccgroup/Loki AGPL のもとで公開されています。詳細は LICENSE を参照してください 説明 Loki（Limited Obstructive Keyboard Impersonator）には RDP...

Sleipnir

Sleipnir Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Sleipnir Released under AGPL see LICENSE for more information Description Sleipnir is a small executable designed for quick...

CVE-2021-43798

usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: the following arguments are required: -H/--host 例: python3 grafana-exploit.py --host 任意ファイルの読み取りに成功した場合、 リクエストURLとcurlコマンドを表示します +RequestURL...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1788279341)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788279341 advisory. - A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785563141)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785563141 advisory. - A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785563141)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785563141 advisory. - A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended...

GO-2026-6508 vulnerabilities

Vulnerabilities for packages: opentofu, grafana-fips, envoy-ai-gateway, grafana-geomys-fips, frankenphp-8.2, harbor-registry-fips, grafana-alloy-fips, caddy, grafana-mimir, opentofu-fips, harbor-registry, fluent-bit-plugin-loki, grafana, datadog-agent-fips, opentelemetry-go-instrumentation-fips,...

GO-2026-6508 vulnerabilities

Vulnerabilities for packages: harbor-registry, grafana-pyroscope, tempo, falcosidekick, zot, datadog-agent, mcp-grafana, aws-otel-collector, loki, amazon-cloudwatch-agent, opentofu, fluent-bit-plugin-loki, pulumi-kubernetes-operator, caddy, kots, distribution, grafana-alloy, grafana-mimir, grafan...

GO-2026-6545 Grafana: Path traversal in the Tempo and Loki data source plugins in github.com/grafana/grafana

Grafana: Path traversal in the Tempo and Loki data source plugins in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabili...

GO-2026-6544 Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. in github.com/grafana/grafana

Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability. in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

CLEANSTART-2026-NH53620 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

Security vulnerability affects the loki package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards...