JYso

JYso ysoserial과 JNDIExploit를 동시에 사용할 수 있는 도구로, 다양한 JNDI 고버전, WAF, RASP 우회 기능을 제공합니다. 한국어 문서 | English 🚀 시작 가이드 📢 이 문서를 꼭 읽어주세요. JYso를 빠르게 익히는 데 도움이 됩니다! 🧐 사용 문서: Wiki ✔ 최신 버전 다운로드: Releases 👍 특징 GUI 실행, 간편한 조작 JNDI 계정/비밀번호 실행 JNDI 경로 숨김 또는 암호화 JNDI 고버전 우회 메모리 셸의 경로, 비밀번호, 인증 HTTP 헤더 및 값을 사용자 정의 메...

Elkeid

Elkeid - Bytedance 클라우드 워크로드 보호 플랫폼 English | 简体中文 Elkeid 는 호스트, 컨테이너, K8s, 서버리스 등 다양한 워크로드의 보안 요구 사항을 충족할 수 있는 오픈 소스 솔루션입니다. 이는 바이트댄스의 내부 모범 사례에서 비롯되었습니다. 기업의 비즈니스 발전에 따라 멀티 클라우드, 클라우드 네이티브, 여러 워크로드의 공존 상황이 점점 더 두드러지고 있습니다. 우리는 다양한 워크로드에서 보안 요구 사항을 충족할 수 있는 솔루션 세트가 있기를 바랐고, 그래서 Elkeid 가 탄생했습니다. ...

cloudrasp-log4j2

CloudArmor · 런타임 애플리케이션 자가 보호 모듈 - Log4j2 버전 간체 중국어 이 프로젝트는 Log4j2 CVE-2021-44228 방어를 위해 특별히 제작된 CloudArmor의 로컬 버전입니다. 이 프로젝트를 실행하는 데 네트워크 연결이 필요하지 않습니다. 프로덕션 환경에 배포하기 전에 반드시 테스트하십시오. 애플리케이션 자가 보호 모듈은 RASP 기술을 사용하여 Java 애플리케이션에 프로브를 주입합니다. log4j2 탐지는 실행 컨텍스트를 감지하여 이루어지며, 비웹 비즈니스 프로그램에도 보호를 제공할 수...

ehids-agent

Anglais | 中文介绍 Introduction à eHIDS HIDS demo implémenté par la technologie du noyau eBPF. Avertissement Ce n'est qu'une DÉMO basée sur eBPF, veuillez utiliser Tetragon / Tracee / falco à la place. Implémentations et fonctionnalités : 1. Capture des données réseau TCP 2. Capture des données résea...

NodeSecurityShield

Node Security Shield Node Security Shield NSS est un outil open source de protection d'application au moment de l'exécution RASP qui vise à combler le fossé en matière de sécurité complète de NodeJS en permettant au développeur et à l'ingénieur sécurité de déclarer les ressources auxquelles une...

rasputin

RASPutin Ресурсы и статьи, связанные с моими выступлениями и работой над unRASP. Эта работа в процессе, пожалуйста, наберитесь терпения : Не стесняйтесь вносить вклад / связываться со мной / делать PR! Доклады Insomni'hack 2022 — Куём золотой молот против защит Android-приложений Этот доклад —...

EUVD-2024-26213

Malicious code in bioql PyPI...

Understanding and Mitigating the MOVEit Incidents

Over the last several weeks, attackers have taken advantage of vulnerabilities in MOVEit, a popular file transfer application developed by Progress. Cyber attackers have successfully performed ransomware and exfiltrated data by uploading web shells into vulnerable MOVEit instances deployed...

CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information

MOVEit Transfer is a popular secure file transfer solution developed by Progress, a subsidiary of Ipswitch. At the moment, there are more than 2,500 MOVEit Transfer servers that are accessible from the internet, according to Shodan. On May 31, 2023, Progress released a security advisory affecting...

Malicious code in rasp-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-720 Malicious code in rasp-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview rasp-vault is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

How DevOps can protect cloud applications from cyberattacks

Many organizations today are moving away from centralized on-prem operations and towards highly scalable cloud solutions such as Amazon’s AWS Lambda functionality. This provides cost-saving benefits and reduces the overall management of an enterprise tech stack. Cloud computing architecture also...

Imperva Protects from New Spring Framework Zero-Day Vulnerabilities

New zero-day Remote Code Execution RCE vulnerabilities were discovered in Spring Framework, an application development framework and inversion of control container for the Java platform. The vulnerability potentially leaves millions of applications at risk of compromise. In two separate...

RASP: The World Cup’s Last Line of Cyber Defense

No greater sporting event exists that brings the peoples of the world together more effectively than the FIFA World Cup, with the first match kickoff set for Monday, 21 November 2022, in Doha, Qatar, at the Al Bayt stadium in Al Khor. Football fans from all across the globe will pour into the Gul...

How We’re Protecting Customers & Staying Ahead of CVE-2021-44228

CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent...

How RASP Protects Apache Servers from zero-day Path Traversal Attacks (CVE-2021-41773)

In late September of 2021, a path traversal and file disclosure vulnerability was disclosed and reported as CVE-2021-41773 in Apache HTTP Server version 2.4.29. Both Windows and Linux servers are affected. This vulnerability, which occurs via remote code execution RCE, exposes a path traversal bu...

How to mitigate security vulnerabilities automatically with RASP

In a world where DevOps is oiling the wheels of accelerated software development, it’s hardly surprising that automation, code re-use and third-party libraries are integral parts of our high-speed app development cycle. But what happens when the pace of development outstrips security? Or when the...

5 Ways Your Software Supply Chain is Out to Get You, Part 3: Exploit Open Source Libraries

In previous posts, we explained how two kinds of supply chain attack methods, Vendor Compromise and Exploit Third Party Applications, are threatening software supply chains, transferring an extraordinary amount of risk downstream to the organizations and users that trust and depend on them. In th...

How to protect serverless and container applications with RASP

With increased demand for container and serverless technology, the need for enhanced security is inevitable. Learn how to secure serverless and container applications using runtime application self-protection RASP...