CyberDefense-Lab

Cyber Security Lab: 블루팀 인프라 및 네트워크 방어 이 실습 프로젝트는 pfSense 를 활용한 중앙 집중식 네트워크 보안, 침입 탐지/방지 시스템IDS/IPS, 보안 정보 및 이벤트 관리SIEM에 초점을 맞춰 통합된 "블루팀" 인프라를 구축하는 방법을 보여줍니다. 1. 환경 구성 및 네트워크 아키텍처 실습 환경은 네트워크 분할 원칙을 사용하여 가상 환경VMware에서 설계되었습니다. 가상 머신 사양 pfSense 방화벽: 1GB RAM, 4 vCPU | 네트워크 어댑터: Bridged + VMnet1 +...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

vcsa-hardening-tool

VCSA 강화 및 로깅 도구 VMware vCenter Server ApplianceVCSA를 위한 자동 강화 스크립트로, 제로 트러스트 네트워크 분할 및 심층 포렌식 감사를 적용하도록 설계되었습니다. 이 도구는 가상화 인프라를 대상으로 하는 고급 지속 위협APT 및 파괴적 캠페인과 관련된 주요 위험을 완화하도록 설계되었습니다. 엄격한 계층 3/4 마이크로 세분화 및 포렌식 명령 로깅을 적용하여 측면 이동, 명령 및 제어C2 비콘, 안티포렌식 변조와 같은 일반적인 공격 벡터를 무력화합니다. 이는 공격자가 VCSA를 발판으로 삼...

dod-blue-team-network-lab

DoD Blue Team 네트워크 보안 및 강화 랩 요약 DoD 정렬 엔터프라이즈 네트워크를 시뮬레이션하는 고충실도 방어 보안 랩입니다. 이 프로젝트는 구조화된 네트워크 세분화, 시스템 강화, 중앙 집중식 텔레메트리 수집, 탐지 엔지니어링, 공격자 에뮬레이션, 그리고 RMF 및 STIG 스타일 제어 프레임워크에 정렬된 측정 가능한 검증을 보여줍니다. 이 랩은 탐지 검증, 사고 대응 문서화, 그리고 방산 계약자 환경에 적합한 규정 준수 산출물 생성 등 실제 블루팀 워크플로우를 모델링합니다. 현재 상태 이 랩은 현재 활발히 개발...

reachability

-- 시작 면책 조항 -- 본인 책임 하에 사용하십시오. – 발생할 수 있는 어떤 손해에 대해서도 본인은 책임지지 않습니다. – 네트워크 소유자의 명시적 허가 없이 이 도구를 실행하지 마십시오. 반복합니다, 실행하지 마십시오. 이것은 MASSCANhttps://github.com/robertdavidgraham/masscan을 감싼 Python 래퍼입니다. -- 면책 조항 종료 -- 이 스크립트는 Debian Linux 배포판을 사용 중이며 인터넷에 접속 가능하다고 가정합니다. 이 스크립트가 답하는 질문? 대상 범위에 접근...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use the correct macoffset to unwind gso skb in nshgsosegment. As shown in the call trace, the skbpanic error occurred due to an incorrect skb-macheader in nshgsoSegment. Invalid opcode: 0000 1 PREEMPT SMP KASAN PTI CPU:...

DrayTek Vigor - Command Injection

DrayTek Gateway devices Vigor2960, Vigor300B, etc. are vulnerable to command injection via the session parameter in the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint. An attacker can inject arbitrary commands and retrieve their output. id: CVE-2024-12987 info: name: DrayTek Vigor - Command...

Security Advisory 0150

Security Advisory 0150 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access...

CVE-2026-48931

A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure. Mitigation Limit outbound HTTP/1.1 from Node.js clients to...

Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)

CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...

CVE-2026-48487

A flaw was found in Zeroconf, a Python library for multicast DNS service discovery. An unauthenticated attacker on the local network can exploit a vulnerability in how the system processes incoming DNS records. By sending a specially crafted record with an excessive length, the attacker can cause...

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process. If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its...

wannacry-soc-lab

WannaCry SOC Investigation Lab Overview This project simu...

Exploit for CVE-2020-25078

ABYSS C2 — HiSilicon DVR Exploit Framework ⚠️ EDUCATIONAL...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

CVE-2026-7412

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

CVE-2026-7412

CVE-2026-7412 affects Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10. The Operation Delegation feature fails to validate the destination URI of delegated requests, enabling an unauthenticated remote attacker to coerce the BaSyx server into performing blind HTTP POSTs to arbitr...

CVE-2026-7412

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

PT-2026-39184

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.3.5 Description An authenticated user can perform Server-Side Request Forgery SSRF by creating a cluster node that points to an arbitrary internal URL and sending API requests with the X-Node-ID header. The Proxy...

PT-2026-34742

Name of the Vulnerable Software and Affected Versions Carlson VASCO-B GNSS Receiver affected versions not specified Description The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism. This allows an attacker with network access to directly access and modify its configuration and...