34 matches found
TrustTunnel
클라이언트 · App Store iOS · App Store macOS · Play 스토어 목차 소개 서버 기능 클라이언트 기능 빠른 시작 엔드포인트 설정 엔드포인트 설치 엔드포인트 업데이트 엔드포인트 구성 마법사 Let's Encrypt 인증서 수명 주기 엔드포인트 실행 클라이언트 구성 내보내기 클라이언트 설정 클라이언트 설치 클라이언트 업데이트 클라이언트 구성 마법사 클라이언트 실행 클라이언트 참고 항목 로드맵 라이선스 소개 TrustTunnel은 AdGuard VPN에서 처음 개발한 현대적인 오픈 소스 VPN 프로토콜로,...
MalleableC2Profiles
MalleableC2Profiles Cobalt Strike 3.6+ 用の Malleable C2 プロファイル bingsearchgetonly.profile - Bing Web 検索プロファイル、GET リクエストのみ使用 cnnvideogetonly.profile - MSNBC ライブビデオストリーミングプロファイル、GET リクエストのみ使用 googledrivegetonly.profile - Google ドライブのドキュメントビューアプロファイル、GET リクエストのみ使用 microsoftupdategetonly.profile -...
mimicry
Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...
mimicry
Mimicry Mimicry Mimicry는 Chaitin Technology가 개발한 보안 도구로, 공격 및 사후 공격 단계에서 적극적인 속임수Active Deception를 사용합니다. 적극적인 속임수는 공격자가 인지하지 못한 상태에서 허니팟으로 실시간 이주시킬 수 있습니다. 적극적인 속임수를 통해 더 낮은 비용으로 더 높은 보안 수준을 달성할 수 있습니다. 한국어 | 중국어 문서 🏠 개요 발표 자료 동영상 🔥 데모 🕹️ 빠른 시작 1. 머신에 docker, docker-compose가 올바르게 설치되었는지 확인 docker...
NimicStack
NimicStack NimicStack는 합법적인 프로그램을 모방하기 위한 Call Stack Spoofing 기법의 순수 Nim 구현입니다. 전체 프로젝트는 WithSecure Labs가 공유한 PoC를 기반으로 합니다. 컴파일 다음 명령으로 소스 코드를 직접 컴파일할 수 있습니다: nim c -d=mingw --app=console --cpu=amd64 -o:NimicStack.exe .\Main.nim "cannot open file" 오류가 발생하는 경우 필수 종속성도 설치해야 합니다: nimble install...
FeatMark: Feature-Level Watermark Protection against Mimicry Attacks with Diffusion Models
Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of a target individual. A common countermeasure is to embed imperceptible, low-energy watermarks, yet recent studies sho...
TrustTunnel v1.1.0
Clients · App Store iOS · App Store macOS · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuratio...
MAL-2026-15534 Malicious code in firestore-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...
MAL-2026-12840 Malicious code in bigops-telephony (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b7311c033191d85d0d19c679ac9d453f7517897b57618d0d8977d654daf94 On require'bigops-telephony', index.js loads adapter.js which selects a platform-specific asset path, fetches an opaque binary from one of three...
Malicious code in automatic-octo-invention (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dfb4e3eedab24e355b6d24db6096e6752563e220d28e83ad2cf213fe49fd89 The package ships an 8.6 MB stripped ELF binary at automaticoctoinvention/claw sha256 f6fe45f8fe9081987505af31f0249021a65b558af514f2e4e37340fb3182805...
Malicious code in syft-acp-atoms (npm)
The syft-acp-atoms package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...
Malicious code in cdktn-provider-newrelic (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51996ccf23fd3d3b291f945e2ec88504c93d7e302e183c7633632b8a03d1590d Package name 'cdktn-provider-newrelic' is a single-character edit cdktf→cdktn of HashiCorp's official 'cdktf-provider-newrelic' CDK for Terraform...
SAGE: Scalable Automatic Gating Ensemble for Confident Negative Harvesting in Fraud Detection
Music streaming fraud, where bad actors artificially inflate stream counts to manipulate chart rankings and royalty payments, poses a significant threat to streaming services and legitimate content creators. Traditional fraud detection approaches struggle with a critical challenge: many legitimat...
Malicious code in env-threads (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb511e0bf06367ec0341939aa68ee55859344c6ca6cb8d9f55f7e62cdcc8656 Package env-threads impersonates the legitimate dotenv package: its README, repository URL git://github.com/motdotla/dotenv.git, homepage, descriptio...
Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception
Unmasking impostors is something the art world has faced for decades, and there are valuable lessons from the works of Elmyr de Hory that can apply to the world of defensive cybersecurity. During the 1960s, de Hory gained infamy as a premier forger, passing off counterfeit masterworks of Picasso,...
Adaptive Detection of Polymorphic Malware: Leveraging Mutation Engines and YARA Rules for Enhanced Security
Polymorphic malware continually alters its structure to evade signature-based defences, challenging both commercial antivirus AV and enterprise detection systems. This study introduces a reproducible framework for analysing eight polymorphic behaviours-junk code insertion, control-flow obfuscatio...
SoK: Security Evaluation of Wi-Fi CSI Biometrics: Attacks, Metrics, and Systemic Weaknesses
Wi-Fi Channel State Information CSI has been repeatedly proposed as a biometric modality, often with reports of high accuracy and operational feasibility. However, the field lacks a consolidated understanding of its security properties, adversarial resilience, and methodological consistency. This...
Deepfake criminals impersonate Marco Rubio to uncover government secrets
Deepfake attacks aren't just for recruitment and banking fraud; they've now reached the highest levels of government. News emerged this week of an AI-powered attack that impersonated US Secretary of State Marco Rubio. Authorities don't know who was behind the incident. A US State Department cable...
MAL-2025-191889 Malicious code in telepycore (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c3dcd0a2a8162a703ef9d7b90566e4c55116a7f4f4d3b8759ca0d2640acd4ee4 Package can only be used requires additional triggering to install a remote executable, ensure it starts on logon and name mimic network service. Though...
