CVE-2021-42562

CVE-2021-42562: MITRE Caldera में अनुचित पहुंच नियंत्रण Caldera versions =2.8.1 उपयोगकर्ता विशेषाधिकारों को ठीक से अलग नहीं करता है, जिसके परिणामस्वरूप गैर-एडमिन उपयोगकर्ताओं के पास उन कॉन्फ़िगरेशन या अन्य घटकों को पढ़ने और संशोधित करने की पहुंच होती है जो केवल एडमिन उपयोगकर्ताओं के लिए सुलभ होने...

Sandbox_Scryer

Sandbox Scryer Version: 1.0.4 Lizenz: GPL v3 Der Sandbox Scryer ist ein Open-Source-Tool zur Erstellung von Threat-Hunting- und Intelligence-Daten aus den Ergebnissen öffentlicher Sandbox-Detonationen. Das Tool nutzt das MITRE ATT&CK-Framework, um Erkenntnisse zu organisieren und zu priorisieren,...

Adrenaline

Kit Adrenaline BOF Uma coleção agnóstica de C2 de arquivos de objetos de beacon BOFs para operações de red team e segurança ofensiva. Os BOFs são organizados por fase da cadeia de ataque e projetados para serem pequenos, modulares e amigáveis para automação, para uso em reconhecimento, enumeração...

PurpleKeep

Beschreibung Mit der rasant zunehmenden Vielfalt an Angriffstechniken und einem gleichzeitigen Anstieg der Anzahl von Erkennungsregeln, die von EDRs Endpoint Detection and Response angeboten oder selbst erstellt werden, hat sich der Bedarf an ständigen Funktionstests der Erkennungsregeln gezeigt...

ghost

Ghost Ghost ist ein Tool zur Erkennung von Prozessinjektionen, geschrieben in Rust. Es überwacht laufende Prozesse und versucht verdächtige Aktivitäten wie Code-Injektion, Speichermanipulation und andere Tricks zu erkennen, die Malware zur Tarnung verwendet. Was es tut Die Grundidee ist einfach:...

ForensiX-Studio

ForensiX Studio Piattaforma di Intelligence Forense | Analisi Malware | Motore di Correlazione delle Minacce 🧠 Analisi Multi-Segnale • ⚡ Intelligence Comportamentale • 🎯 Mappatura MITRE ⚠️ AVVERTENZA LEGALE ForensiX Studio è destinato esclusivamente a indagini forensi digitali autorizzate, ricerca...

Mobile-Drop-Device-SOC-Detection

🛡️ परियोजना फैंटम: मोबाइल "ड्रॉप डिवाइस" SOC डिटेक्शन सिमुलेशन यह परियोजना एक एंड-टू-एंड SOC प्रयोगशाला कार्यशाला का प्रदर्शन करती है जो यह दर्शाती है कि कैसे एक अनधिकृत, रूट-रहित एंड्रॉइड डिवाइस Casper Via S, जिसे आंतरिक नेटवर्क के भीतर "ड्रॉप डिवाइस" के रूप में उपयोग किया जाता है, Wazuh SIEM...

Attacker-Group-Predictor

Angreifer-Gruppen-Vorhersage Das Tool sagt Angreifergruppen anhand der verwendeten Techniken und Software voraus. Es sucht basierend auf dem MITRE ATT&CK™ Framework. Wie funktioniert es? 1- Daten von https://attack.mitre.org/ über Angreifergruppen sammeln 2- Daten vom Benutzer über den Angriff...

attackintel

UPDATE 26 Nov 2018 MITRE has deprecated the ATT&CK API functionality and will soon be phasing it out. They have moved to utilizing STIX. My code will be available for reference but you can check out my ATT&CK Intel webapp which is in the preliminary phases of development and offers the same info...

attackintel

अद्यतन 26 नवंबर 2018 MITRE ने ATT&CK API कार्यक्षमता को अप्रचलित कर दिया है और इसे जल्द ही बंद कर दिया जाएगा। वे STIX का उपयोग करने लगे हैं। मेरा कोड संदर्भ के लिए उपलब्ध रहेगा, लेकिन आप मेरे ATT&CK Intel वेबऐप को देख सकते हैं, जो विकास के प्रारंभिक चरण में है और समान जानकारी प्रदान करता है। लिंक...

cybersecurity-home-lab-btp

🛡️ Laboratorio Domestico di Cybersecurity — Rilevamento e Monitoraggio B.Tech Project BTP | IIIT Pune Basato su: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi Un laboratorio domestico di cybersecurity completamente funzionant...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

BloodSOCer

BloodSOCer BloodSOCer ist ein Python-Automatisierungstool, das Threat-Intelligence-Daten aus mehreren Quellen Mitre ATT&CK, Sigma-Regeln, Atomic Red Team aggregiert und JSON-Dateien erzeugt, die im OpenGraph-Format in BloodHound importiert werden können. BloodSOCer kann die Dateien auch in...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise This is a Microsoft Sysinternals Sysmon download here configuration repository, set up modular for easier maintenance and generation of specific configs. Please keep in mind that any of these configurations should be...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

dorothy

Creato da David French @threatpunter presso Elastic Security Dorothy è uno strumento per aiutare i team di sicurezza a testare le loro capacità di monitoraggio e rilevamento per il loro ambiente Okta. Dorothy ha diversi moduli per simulare azioni che un attaccante potrebbe compiere mentre opera i...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

windows-malware-behavioral-analysis

Análise Comportamental de Malware usando REMnux & FLARE-VM Uma investigação prática de malware do Blue Team demonstrando como executáveis suspeitos do Windows podem ser analisados com segurança dentro de um laboratório isolado usando técnicas de análise comportamental. Em vez de fazer engenharia...

decider

Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...

dfir-malware-investigation

Laboratorio di Indagine Malware DFIR – Spring4Shell CVE-2022-22965 Un progetto completo di Digital Forensics & Incident Response DFIR che simula, rileva e investiga la vulnerabilità critica Spring4Shell CVE-2022-22965. Questo progetto dimostra l'intero ciclo di vita della risposta agli incidenti,...