58 matches found
rita
RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...
rita
RITA Real Intelligence Threat Analytics RITA에서 더 나아가 헌팅 자동화, 미래지향적 시각화, 데이터 강화를 원하신다면 AC-Hunter를 확인해보세요. Active Countermeasures 제공. BHIS 후원. RITA는 네트워크 트래픽 분석을 위한 오픈 소스 프레임워크입니다. 이 프레임워크는 TSV 또는 JSON 형식의 Zeek 로그를 수집하며, 현재 다음과 같은 주요 기능을 지원합니다: 비콘 탐지 : 네트워크 내외부에서 비콘 동작의 징후를 검색 장기 연결 탐지 : 오랜 시간 동안 통...
squidmagic
Squidmagic 是一个旨在分析基于 Web 的网络流量，利用 Squid 代理服务器和 Spamhaus 来检测中央命令与控制（C&C）服务器及恶意站点的工具。 安装依赖 root@kitploit: pip install -r requirements.txt 使用方法 root@kitploit: python squidmagic.py /squid/access.log | | | | / |/ | | | | |/ | ' \ / |/ | |/ | \ \ | | || | | | | | | | | | | | | | | |/, |,||,|| ||...
Malcolm
Malcolm Malcolm은 강력한 네트워크 트래픽 분석 도구 모음으로, 다음 목표를 염두에 두고 설계되었습니다: 사용하기 쉬움 – Malcolm은 전체 패킷 캡처PCAP 파일, Zeek 로그, Suricata 알림 형태의 네트워크 트래픽 데이터를 수용합니다. 이러한 아티팩트는 간단한 브라우저 기반 인터페이스를 통해 업로드하거나, 경량 포워더를 사용하여 수동적으로 캡처하여 Malcolm으로 전달할 수 있습니다. 두 경우 모두 데이터는 자동으로 정규화, 강화, 상관 관계 분석됩니다. 강력한 트래픽 분석 – 네트워크 통신에 대한...
Malcolm
Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...
Malcolm
Malcolm Malcolm은 다음과 같은 목표를 염두에 두고 설계된 강력한 네트워크 트래픽 분석 도구 모음입니다: 사용하기 쉬움 – Malcolm은 전체 패킷 캡처PCAP 파일, Zeek 로그, Suricata 알림 형태의 네트워크 트래픽 데이터를 수용합니다. 이러한 아티팩트는 간단한 브라우저 기반 인터페이스를 통해 업로드하거나 경량 포워더를 사용하여 수동적으로 캡처하여 Malcolm으로 전달할 수 있습니다. 두 경우 모두 데이터는 자동으로 정규화, 강화 및 상관 분석됩니다. 강력한 트래픽 분석 – 네트워크 통신에 대한 가시...
Web-Attack-Detection-Lab
!Kali Linuxhttps://img.shields.io/badge/KaliLinux-557C94?sty...
Ethical-Hacking-Tools-Level2
🛡️ Cybersecurity & Python Portfolio - Level 2 Author: Pa...
ReGAIN: Retrieval-Grounded AI Framework for Network Traffic Analysis
Modern networks generate vast, heterogeneous traffic that must be continuously analyzed for security and performance. Traditional network traffic analysis systems, whether rule-based or machine learning-driven, often suffer from high false positives and lack interpretability, limiting analyst...
Binary and Multiclass Cyberattack Classification on GeNIS Dataset
The integration of Artificial Intelligence AI in Network Intrusion Detection Systems NIDS is a promising approach to tackle the increasing sophistication of cyberattacks. However, since Machine Learning ML and Deep Learning DL models rely heavily on the quality of their training data, the lack of...
EUVD-2020-4276
Malware in sbrugna...
Exploit for Missing Authorization in Elementor Website_Builder
Отчёт по учебной практике Содержание - 1. Введение1-в...
maltrail
It is an offensive tool for network traffic analysis. The primary CVE ID is not present in the provided context, but the tool is designed to detect malicious traffic. The target product/service or framework is not explicitly stated, but it is likely a network traffic analysis system. The...
The vulnerability of the network traffic analysis, network detection, and response tool Palo Alto Networks Cortex XDR Agent, related to the handling of the zero pointer, allows attackers to trigger a service failure.
The vulnerability of the Palo Alto Networks Cortex XDR Agent, which is used for network traffic analysis, network detection, and response, relates to the handling of the zero pointer. Exploiting this vulnerability could allow attackers to trigger service failures...
The vulnerability of the detection mechanism for network traffic analysis tools, network detection, and response by Palo Alto Networks’ Cortex XDR Agent on Windows operating systems allows attackers to disable the Cortex XDR Agent and execute arbitrary code.
The vulnerability of the detection mechanism for network traffic analysis, network detection, and response by Palo Alto Networks’ Cortex XDR Agent in Windows operating systems is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow an attack...
TrafficWatch - TrafficWatch, A Packet Sniffer Tool, Allows You To Monitor And Analyze Network Traffic From PCAP Files
TrafficWatch, a packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files. It provides insights into various network protocols and can help with network troubleshooting, security analysis, and more. Protocol-specific packet analysis for ARP, ICMP, TCP, UDP, DNS, DHCP,...
Input validation
A Denial of Service Dos vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets...
PT-2022-37672 · Palo Alto Networks · Cortex Xdr Agent
Уязвимость средства анализа сетевого трафика, сетевого обнаружения и реагирования Cortex XDR Agent связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...
Cisco Secure Network Analytics Remote Code Execution Vulnerability
Cisco Secure Network Analytics is one of the most comprehensive visibility and network traffic analysis Nta/network detection and response Ndr solutions from Cisco. Cisco Secure Network Analytics is vulnerable to a remote code execution vulnerability that could be exploited by an attacker to...
The vulnerability of the print_prefix function in tcpdump software for network traffic analysis, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.
The vulnerability of the printprefix function in software for analyzing network traffic using tcpdump relates to reading data from within allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...