FML-Network

FLNET2023：用于联邦学习的真实网络入侵检测数据集 论文：FLNET2023：用于联邦学习的真实网络入侵检测数据集 数据集：FLNET2023 引言 FLNET2023 是一个用于入侵检测系统的最先进基准数据集，专门针对联邦学习应用。它使用 CORE 模拟器生成，体现了真实的网络拓扑以及多样化的流量和攻击类型。FLNET2023 旨在鼓励针对基于联邦学习的网络入侵检测开展稳健的研究。 CORE 模拟器 通用开放研究模拟器 CORE 是一种在一台或多台机器上模拟网络的工具。您可以将这些模拟网络连接到真实网络。CORE 由一个用于绘制轻量级虚拟机拓扑的 GUI 和用于编写网络模拟脚本的...

skydive

Skydive Skydive 是一个开源的实时网络拓扑和协议分析器。 它旨在提供一种全面的方式，以理解网络基础设施中正在发生的事情。 Skydive 代理收集拓扑信息和流，并将其转发到中央代理进行进一步分析。所有信息都存储在 Elasticsearch 数据库中。 Skydive 与 SDN 无关，但提供 SDN 驱动以增强拓扑和流信息。 主要特性 捕获网络拓扑和流 网络拓扑和流的完整历史 分布式 能够沿拓扑中的路径追踪流 支持虚拟机和容器基础设施 用于拓扑和流的统一查询语言 Gremlin Web 和命令行界面 REST API 易于部署 独立可执行文件 连接到...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation（A2P2V）は、特定の攻撃者の目標に対するランク付けされた攻撃シーケンスのセットを決定する機能を提供する、計画およびサイバー攻撃ツールです。このツールの目的は、非セキュリティ専門家でも最小限の入力から明確で実行可能な知見を生成できるようプロセスを簡素化し、可能な限り自動化を活用して解釈しやすいレポートを出力することです。...

network-security-snort

Snort IDS/IPS 部署实验 在 Kali Linux 上的三虚拟机网络中，对 Snort 3 进行了全流程部署，既作为入侵检测系统（被动监控），也作为入侵防御系统（通过 iptables 主动阻断），并针对四种攻击向量完成了验证。 本实验通过将同一套四向量攻击链运行两次，证明了检测 与防护 之间的运维性区别——第一次针对只能记录日志但无法阻断的 IDS，第二次针对 IDS + iptables IPS 层，后者有选择地丢弃攻击流量，同时保留合法流量。 目录 实验环境 网络拓扑 方法论 Snort 配置 自定义检测规则 阶段 1 — IDS 模式 阶段 2 — IPS 模式 ID...

AgentCyTE

CORE TopoGen 使用丰富的 Web GUI 或命令行界面，从场景 XML 文件生成可复现的 CORE 网络拓扑。 目录 高亮特性 截图 快速开始 先决条件 安装依赖 启动 Web UI 运行 CLI 完整预览工作流 功能深入解析 规划语义 路由器连接与聚合 流量、分段与服务 报告与产物 架构概述 故障排查 附加文档 贡献 引用 高亮特性 单一来源规划 – 在浏览器或任何 XML 编辑器中编辑场景，并通过 CLI 复现结果。 确定性预览 – 可选的 RNG 种子锁定主机扩展、路由器放置、连接性、服务、分段和漏洞分配。 实时日志坞 –...

Security_incident_report

01. 基础设施构成 该项目的基础设施并未通过 IaC（Terraform 等）代码进行管理，而是采用安装 pfSense·Wazuh 后，在管理界面（GUI）中直接修改配置 的方式构建。因此，这里记录的并非"代码"，而是网络拓扑图、各配置界面的截图，以及更改了哪些值、为何更改，以便能够复现。 网络构成 以 pfSense 为基准，将外部（WAN）与内部（LAN）分离，并通过交换机将内部网络进一步划分为 4 个区域。 区分| 目标系统| IP 网段| 作用 ---|---|---|--- DMZ| WEB01 WAF + WAS| 10.10.10.0/24| 对外暴露的 Web 服务...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-56597

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

CVE-2026-56597 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

EUVD-2026-82783

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

CVE-2026-56597

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability that allows an unauthenticated attacker to extract internal IP addresses from the application's responses. This enables the attacker to map the underlying network topology and identify potential internal ta...

CVE-2026-56597: Exposure of Sensitive Information to an Unauthorized Actor

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

CVE-2026-92960: Exposure of Sensitive Information to an Unauthorized Actor

vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: '' configuration, allowing sandbox code to read host process identity and network topology. Attackers can invoke dns.setServers to hijack the host process DNS resolver globally, redirecting all subsequent host DN...

CVE-2026-86122 Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network...

CVE-2026-86122: Server-Side Request Forgery (SSRF)

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network...

CVE-2026-51620

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51620: Improper Access Control

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51620

The TOTOLINK T6 router, specifically on firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control issue in the getNetInfoCfg function. This flaw allows unauthenticated attackers to obtain sensitive network topology and interface configuration information by sending a c...