6651 matches found
binaryalert
BinaryAlert: 无服务器、实时与回溯性恶意软件检测 .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: 构建状态 .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master :target:...
IOCScraper
IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...
Yara-detection-rules
Yara Rules A collection of experimental yara rules Covering a range of Malware Families and Attack Tooling Twitter: https://twitter.com/embeeresearch Includes Rules For Havoc C2 Brute Ratel NightHawk Qakbot IcedID Quasar RAT Cobalt Strike Vidar Remcos Xworm License The rules are essentially free ...
infernal-twin
Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...
ThreatHound
ThreatHound ThreatHound is an advanced cybersecurity tool designed to facilitate efficient threat detection and analysis, windows events logs. it offers a user-friendly interface for managing and analyzing security data. Key features include log analysis, Sigma rule integration, and real-time...
statiStrings
statiStrings | | | | || | / | / | | \ | | '| | ' \ / / | \ \ || | | || | | || | | | | | | | \ \ |/\,|||/ || ||| ||, |/ |/ YARA Rule Strings Statistics Calculator Shelly Raban Sh3llyR, February 2021, Version 0.1 Table of Contents 1. About The Project Built With 2. Getting Started Installation...
arya
Arya - 反向YARA Arya是一种独特的工具，用于生成旨在触发YARA规则的伪恶意文件。你可以把它想象成一个反向YARA，因为它恰恰做了相反的事情——它创建与你的规则匹配的文件。 你可以在我们的博客中阅读更多关于Arya及其工作原理的信息。 简介 YARA规则是安全研究人员识别和分类恶意软件样本的重要工具。它们通过描述恶意软件代码中的模式和字符串来帮助分析师识别已知或新的威胁。YARA规则也经常集成到商业检测工具中，或内部用于检测企业网络中的异常二进制文件。...
Hashcat-Cheatsheet
Hashcat-Cheatsheet Hashcat Cheatsheet for OSCP https://hashcat.net/wiki/doku.php?id=hashcat Identify Hashes hash-identifier Example Hashes: https://hashcat.net/wiki/doku.php?id=examplehashes MAX POWER! I have found that I can squeeze some more power out of my hash cracking by adding these...
apkleaks
APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi $ pip3 install apkleaks from Source Clone...
semgrep-rules
Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...
masc
masc 一款在 CyperCamp 2017 黑客松期间开发的恶意软件（网络）扫描器 关于 主页 PyPI 功能 目前，某些功能适用于任何类型的网站（自定义或CMS），而某些功能仅适用于特定平台： 使用 OWASP WebMalwareScanner 校验和、YARA 规则数据库以及 ClamAV 引擎（如果可用）扫描任何网站的恶意软件 执行一些清理操作以增强网站防护 监控网站的变更。详细信息会记录在日志文件中 扫描您的网站以了解是否感染了恶意软件 列出本地备份 日志支持 备份网站 恢复网站 扫描可疑文件并与干净安装版本进行比较（适用于 Wordpress 和 Drupal）...
masc
masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...
Scramble Laravel - Remote Code Execution
Scramble for Laravel = 0.13.2 and = 0.13.2 and 0.13.22 contains a remote code execution caused by evaluation of user-controlled input in validation rules during documentation generation, letting remote attackers execute arbitrary PHP code, exploit requires publicly accessible documentation...
Sigma_rules
Sigmarules Random sigma rules to share with the community All rules are made by me. Research is referenced in the rules...
kubeeye
English | 中文 KubeEye 是为 Kubernetes 设计的云原生集群巡检工具，用于根据自定义规则发现 Kubernetes 集群中存在的问题及风险。 快速开始 安装 可从 Releases 中下载安装包（其中包含helm chart，demo rules 以及 供离线环境部署的镜像） VERSION=v1.0.3 wget https://github.com/kubesphere/kubeeye/releases/download/$VERSION/kubeeye-offline-$VERSION.tar.gz tar -zxvf...
CVE-2025-25616
CVE-2025-25616 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing students to modify exam rules. The affected endpoint is /exams/edit-rule?examruleid=1. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Student. Step 2: Browse to the following endpoint:...
AlphaGolang
AlphaGolang 作者：Juan Andres Guerrero-Saade JAG-S @ SentinelLabs 描述： AlphaGolang 是一组 IDAPython 脚本，旨在帮助恶意软件逆向工程师掌握 Go 二进制文件。其理念是将脚本拆分为具体的步骤，从而避免脆弱的单体脚本，并模拟分析人员在处理 Go 二进制文件时可能遵循的方法。 脚本根据 GPL 许可发布（感谢 Tim Strazzere 的原始 GolangLoaderAssist，我们对其进行了重构并更新为 Python3，向 Tim 致敬 :）。欢迎并鼓励贡献！ 要求：IDA Pro（理想版本 v7.6+）...
github.com/grafana/grafana: Grafana: Information disclosure via alert rules list API
A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...
github.com/grafana/grafana: Grafana: Information disclosure via alert rules list API
A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...