NodeSecurityShield

Node Security Shield Node Security Shield NSS 是一个开源运行时应用自我保护（RASP ）工具，旨在通过允许 开发者 和 安全工程师 声明应用可以访问哪些资源，来填补 NodeJS 全面安全性的空白。 受 Log4Shell（CVE-2021-44228）漏洞的启发（该漏洞因应用可发起任意网络调用而被利用），我们认为应用需要一种机制来自行声明允许的权限，通过实施额外的控制来增加利用此类漏洞的难度。 为了实现这一点，NSS Node Security Shield 提出了资源访问策略 RAP 资源访问策略 RAP 资源访问策略 类似于 CSP...

ehids-agent

English | 中文介绍 Introducción a eHIDS HIDS demo implementado con tecnología de kernel eBPF. Advertencia Solo un DEMO basado en eBPF, por favor utilice Tetragon / Tracee / falco en su lugar. Implementaciones y funcionalidades： 1. Captura de datos de red TCP 2. Captura de datos de red UDP 3. Captura ...

JYso

JYso It can be used as a tool for ysoserial and JNDIExploit at the same time, and has the bypass function of multiple JNDI high versions, WAF, and RASP 🚀 Getting Started Guide 📢 Please take a moment to read this document, it will help you quickly get familiar with JYso! 🧐 Use the Documentation...

Elkeid

Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid 是一款可以满足 主机，容器与容器集群，Serverless 等多种工作负载安全需求的开源解决方案，源于字节跳动内部最佳实践。 随着企业的业务发展，多云、云原生、多种工作负载共存的情况愈发凸显，我们希望可以有一套方案可以满足不同工作负载下的安全需求，因此 Elkeid 诞生了。 Introduction Elkeid 具备以下主要能力： Elkeid 不仅具备传统的 HIDSHost Intrusion Detection System...

cloudrasp-log4j2

CloudArmor · Módulo de Autoprotección de Aplicaciones en Tiempo de Ejecución - Versión Log4j2 简体中文 Este proyecto es una versión local de CloudArmor construida específicamente para defender Log4j2 CVE-2021-44228. No se requiere conexión de red para ejecutar este proyecto. Por favor, REALICE PRUEBA...

rasputin

RASPutin Recursos y artículos relacionados con mis conferencias y trabajo sobre unRASPs. Este trabajo está en progreso, por favor ten paciencia : ¡No dudes en contribuir / contactarme / hacer PR! Charlas Insomni'hack 2022 - Forjando martillo dorado contra las protecciones de aplicaciones Android...

EUVD-2024-26213

Malicious code in bioql PyPI...

Understanding and Mitigating the MOVEit Incidents

Over the last several weeks, attackers have taken advantage of vulnerabilities in MOVEit, a popular file transfer application developed by Progress. Cyber attackers have successfully performed ransomware and exfiltrated data by uploading web shells into vulnerable MOVEit instances deployed...

CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information

MOVEit Transfer is a popular secure file transfer solution developed by Progress, a subsidiary of Ipswitch. At the moment, there are more than 2,500 MOVEit Transfer servers that are accessible from the internet, according to Shodan. On May 31, 2023, Progress released a security advisory affecting...

Malicious code in rasp-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-720 Malicious code in rasp-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview rasp-vault is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

How DevOps can protect cloud applications from cyberattacks

Many organizations today are moving away from centralized on-prem operations and towards highly scalable cloud solutions such as Amazon’s AWS Lambda functionality. This provides cost-saving benefits and reduces the overall management of an enterprise tech stack. Cloud computing architecture also...

Imperva Protects from New Spring Framework Zero-Day Vulnerabilities

New zero-day Remote Code Execution RCE vulnerabilities were discovered in Spring Framework, an application development framework and inversion of control container for the Java platform. The vulnerability potentially leaves millions of applications at risk of compromise. In two separate...

RASP: The World Cup’s Last Line of Cyber Defense

No greater sporting event exists that brings the peoples of the world together more effectively than the FIFA World Cup, with the first match kickoff set for Monday, 21 November 2022, in Doha, Qatar, at the Al Bayt stadium in Al Khor. Football fans from all across the globe will pour into the Gul...

How We’re Protecting Customers & Staying Ahead of CVE-2021-44228

CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent...

How RASP Protects Apache Servers from zero-day Path Traversal Attacks (CVE-2021-41773)

In late September of 2021, a path traversal and file disclosure vulnerability was disclosed and reported as CVE-2021-41773 in Apache HTTP Server version 2.4.29. Both Windows and Linux servers are affected. This vulnerability, which occurs via remote code execution RCE, exposes a path traversal bu...

How to mitigate security vulnerabilities automatically with RASP

In a world where DevOps is oiling the wheels of accelerated software development, it’s hardly surprising that automation, code re-use and third-party libraries are integral parts of our high-speed app development cycle. But what happens when the pace of development outstrips security? Or when the...

5 Ways Your Software Supply Chain is Out to Get You, Part 3: Exploit Open Source Libraries

In previous posts, we explained how two kinds of supply chain attack methods, Vendor Compromise and Exploit Third Party Applications, are threatening software supply chains, transferring an extraordinary amount of risk downstream to the organizations and users that trust and depend on them. In th...

How to protect serverless and container applications with RASP

With increased demand for container and serverless technology, the need for enhanced security is inevitable. Learn how to secure serverless and container applications using runtime application self-protection RASP...