Elkeid

Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices. With the business...

NodeSecurityShield

Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...

JYso

JYso It can be used as a tool for ysoserial and JNDIExploit at the same time, and has the bypass function of multiple JNDI high versions, WAF, and RASP 🚀 Getting Started Guide 📢 Please take a moment to read this document, it will help you quickly get familiar with JYso! 🧐 Use the Documentation...

ehids-agent

English | 中文介绍 Introduction to eHIDS HIDS demo implemented by eBPF kernel technology. Warning Just a eBPF-based DEMO, please use Tetragon / Tracee / falco instead. Implementations & Functionalities： 1. TCP network data capture 2. UDP network data capture 3. DNS information capture in uprobe mode ...

cloudrasp-log4j2

CloudArmor · 런타임 애플리케이션 자가 보호 모듈 - Log4j2 버전 간체 중국어 이 프로젝트는 Log4j2 CVE-2021-44228 방어를 위해 특별히 제작된 CloudArmor의 로컬 버전입니다. 이 프로젝트를 실행하는 데 네트워크 연결이 필요하지 않습니다. 프로덕션 환경에 배포하기 전에 반드시 테스트하십시오. 애플리케이션 자가 보호 모듈은 RASP 기술을 사용하여 Java 애플리케이션에 프로브를 주입합니다. log4j2 탐지는 실행 컨텍스트를 감지하여 이루어지며, 비웹 비즈니스 프로그램에도 보호를 제공할 수...

rasputin

RASPutin 제 컨퍼런스 및 unRASP 작업에 관한 자료와 논문입니다. 이 작업은 진행 중입니다. 조금만 기다려 주세요 : 언제든지 기여 / 연락 / PR을 보내 주세요! 발표 Insomni'hack 2022 - Android 앱 보호에 대항하는 황금 망치 제작 이 발표는 새로운 시리즈의 첫 번째입니다. 슬라이드 초록 Insomni'hack 웹사이트 Yara 규칙 / RASP 프로파일링 여러 규칙이 Koodous에서 활성화되어 있습니다. 이를 사용하면 정상 앱의 트로이 목마화된 버전을 탐지할 수 있습니다. 최신 소식을...

EUVD-2024-26213

Malicious code in bioql PyPI...

Understanding and Mitigating the MOVEit Incidents

Over the last several weeks, attackers have taken advantage of vulnerabilities in MOVEit, a popular file transfer application developed by Progress. Cyber attackers have successfully performed ransomware and exfiltrated data by uploading web shells into vulnerable MOVEit instances deployed...

CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information

MOVEit Transfer is a popular secure file transfer solution developed by Progress, a subsidiary of Ipswitch. At the moment, there are more than 2,500 MOVEit Transfer servers that are accessible from the internet, according to Shodan. On May 31, 2023, Progress released a security advisory affecting...

Malicious code in rasp-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-720 Malicious code in rasp-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview rasp-vault is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

How DevOps can protect cloud applications from cyberattacks

Many organizations today are moving away from centralized on-prem operations and towards highly scalable cloud solutions such as Amazon’s AWS Lambda functionality. This provides cost-saving benefits and reduces the overall management of an enterprise tech stack. Cloud computing architecture also...

Imperva Protects from New Spring Framework Zero-Day Vulnerabilities

New zero-day Remote Code Execution RCE vulnerabilities were discovered in Spring Framework, an application development framework and inversion of control container for the Java platform. The vulnerability potentially leaves millions of applications at risk of compromise. In two separate...

RASP: The World Cup’s Last Line of Cyber Defense

No greater sporting event exists that brings the peoples of the world together more effectively than the FIFA World Cup, with the first match kickoff set for Monday, 21 November 2022, in Doha, Qatar, at the Al Bayt stadium in Al Khor. Football fans from all across the globe will pour into the Gul...

How We’re Protecting Customers & Staying Ahead of CVE-2021-44228

CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent...

How RASP Protects Apache Servers from zero-day Path Traversal Attacks (CVE-2021-41773)

In late September of 2021, a path traversal and file disclosure vulnerability was disclosed and reported as CVE-2021-41773 in Apache HTTP Server version 2.4.29. Both Windows and Linux servers are affected. This vulnerability, which occurs via remote code execution RCE, exposes a path traversal bu...

How to mitigate security vulnerabilities automatically with RASP

In a world where DevOps is oiling the wheels of accelerated software development, it’s hardly surprising that automation, code re-use and third-party libraries are integral parts of our high-speed app development cycle. But what happens when the pace of development outstrips security? Or when the...

5 Ways Your Software Supply Chain is Out to Get You, Part 3: Exploit Open Source Libraries

In previous posts, we explained how two kinds of supply chain attack methods, Vendor Compromise and Exploit Third Party Applications, are threatening software supply chains, transferring an extraordinary amount of risk downstream to the organizations and users that trust and depend on them. In th...

How to protect serverless and container applications with RASP

With increased demand for container and serverless technology, the need for enhanced security is inevitable. Learn how to secure serverless and container applications using runtime application self-protection RASP...