rules

Hashcat Rules Collection An updated, curated collection of Hashcat rules for cracking complex passwords. !NOTE Hashcat beta has introduced The Table Attack. A collection of tables can be found here. Contributors needed. 🤝 Contributing Simply fork the repo, commit your changes, and open a PR. ⭐...

Telstra-Cybersecurity-Virtual-Experience-

Telstra-Cybersecurity-Virtual-Experience-Program I participated in Telstra's Security Operations Centre as an Information Security Analyst to gain first-hand experience of the daily tasks and responsibilities of a Security Analyst at Telstra. The tasks carried out: 1. Triaged a malware attack...

CVE-2024-28784

CVE-2024-28784 — Stored XSS in IBM QRadar SIEM Rule Wizard 🛠 Product Information Vendor: IBM Product: IBM Security QRadar SIEM Affected Version: 7.5.0 UpdatePackage 7 Build 20230822112654 Component: Rule Wizard Regular Expression Logic Block CVE ID: CVE-2024-28784 🐞 Vulnerability Summary A stored...

Sigma-Rule-for-CVE-2021-22005-scanning-activity

Este repositorio no tiene un README...

Spring4Shell

Spring4Shell In this challenge, I analyzed the Spring4Shell CVE-2022-22965 vulnerability, investigated security bypasses, and wrote an Incident Postmortem Report detailing the detection, impact, and resolution of the attack. I also implemented a firewall rule in Python to block malicious requests...

Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-

Detect-Backdoor-in-liblzma-of-XZ-utils-CVE-2024-3094- The following YARA rule helps detect the presence of the backdoor in the compromised liblzma library on systems using versions 5.6.0 and 5.6.1 of the XZ compression tool. This provides a mechanism to identify vulnerable systems that could be...

CVE-2025-29927-Sigma-Rule

CVE-2025-29927 Report Overview CVE-2025-29927 is a security vulnerability in Next.js middleware, allowing attackers to bypass authentication by modifying specific HTTP headers. Exploitation Attackers can send a request with the header x-middleware-subrequest: middleware to bypass authentication...

BruteRatel-DetectionTools

BruteRatel-DetectionTools A collection of Tools and Rules for decoding Brute Ratel C4 badgers All tools and rules are based on samples identified by PaloAlto in their report https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ Yara Rule The yara rule has been tested against the samples includ...

YARA-Performance-Guidelines

YARA Performance Guidelines Writing efficient YARA rules is essential for maintaining fast and accurate scanning performance. This guide provides key principles and best practices to help you optimize your rules, reduce unnecessary computation, and avoid common pitfalls. It incorporates insights...

CVE-2026-108870

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler that allows low-privileged authenticated users to modify role data rules. Attackers can send permissionId, roleId and dataRuleIds to overwrite dataruleids, clearing row-level filte...

coraza

Coraza - Cortafuegos de Aplicaciones Web Coraza es un cortafuegos de aplicaciones web WAF de código abierto, de grado empresarial y alto rendimiento, listo para proteger tus queridas aplicaciones. Está escrito en Go, es compatible con los conjuntos de reglas SecLang de ModSecurity y es 100%...

My-Sigma-Rule-Collection

Collection of Sigma Rules That I Created From Research I found interesting Overview This repository contains a collection of custom Sigma rules I've created/found based on vulnerabilities, threat reports, and techniques I found interesting. Each rule includes references, detection logic, and...

pantagrule

Pantagrule conjuntos de reglas hashcat gigantescos generados a partir de contraseñas comprometidas Advertencia de mantenimiento del proyecto : Este proyecto se considera completado. No se realizarán solicitudes de extracción ni cambios en este proyecto en el futuro a menos que sean errores reales...

avpass

AVPASS AVPASS es una herramienta para filtrar el modelo de detección de sistemas de detección de malware Android es decir, software antivirus y eludir sus lógicas de detección utilizando la información filtrada junto con técnicas de ofuscación de APK. AVPASS no se limita a las características de...

scodescanner

SCodeScanner SCodeScanner significa Escáner de Código Fuente, donde el usuario puede escanear el código fuente para encontrar vulnerabilidades críticas. El objetivo principal de este escáner es encontrar vulnerabilidades dentro del código fuente antes de que el código se publique en producción...

pulledpork

PulledPork Herramienta de gestión de reglas para Snort y Suricata desde Google code Encuéntranos en Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk y el equipo de PulledPork. ¡Gracias por elegir PulledPork! Este archivo proporciona una guía básica sobre el uso de...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

ModSec-log4j2

Testing the ModSec rule Prerequisites Have docker installed Have Java installed on your machine Running the test Perform a git clone of the repository Execute the command below to start the WAF ModSec and the vulnerable application docker stack deploy -c docker-compose.yml WAF Extract the...

CVE-2024-27956-for-fscan

🛑CVE-2024-27956-for-fscan Thanks for PoC by diego-tella English This is a Yaml PoC rule of CVE-2024-27956 Wordpress Automatic SQLi for fscan. How to use: 1. Add the yml file to path:/fscan-main/WebScan/pocs. 2. Build the fscan's go files. 3. Start the fscan and enjoy. Attention: If the...

cobaltstrike-sleepmask-yara

cobaltstrike-sleepmask-yara Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-mask-kit-iocs tl;dr The tl;dr of it is that these bytes are part of the sleep mask kit unobfuscated .text section itsel...