6652 matches found
CVE-2024-4577-rayng
CVE-2024-4577 - Laboratorio de DetecciΓ³n de InyecciΓ³n de Argumentos en PHP CGI Un laboratorio completo de ingenierΓa de detecciΓ³n para CVE-2024-4577 InyecciΓ³n de Argumentos en PHP CGI. Incluye cajas Vagrant preconstruidas, reglas de Wazuh SIEM y herramientas de explotaciΓ³n para entrenamiento del...
duo-agentflow-auditor
Duo AgentFlow Auditor AI Code Security β catching what SAST misses in AI-generated code Built on the GitLab Duo Agent Platform 40-62% of AI-generated code contains security vulnerabilities. Traditional SAST catches CVEs. We catch what SAST misses β prompt injection, LLM output execution, unsafe M...
threat-research-and-intelligence
Blogs completos de inteligencia | Resultados de blogs | Resultados de informes | Charlas pΓΊblicas βΉοΈ :: DescripciΓ³n general Este repositorio tiene como objetivo la difusiΓ³n de IOCs, reglas YARA y cΓ³digo fuente de los informes de inteligencia sobre amenazas publicados por el equipo de BlackBerry...
YARA_Rules
Yara Rules BY MALGAMY This project contains a collection of Yara rules that can be used to identify and classify various types of files. Table of Contents Overview Installation Usage Contributing Overview Yara is a tool that allows users to create their own rules for identifying and classifying...
2022
100 Days of YARA Part 2 - Electric Detectaloo Apologies in advance for the terrible naming, but welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! Fo...
DynamicDotNet
DynamicDotNet A collection of various and sundry code snippets that leverage .NET dynamic tradecraft Purpose To showcase offensive and defensive tooling and POCs that leverage .NET dynamic loading, staging, bootstrapping, types, objects, functions, etc. Contribute Source Code & Text Documents All...
Adobe AEM Dispatcher <4.15 - Rules Bypass
Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. id: CVE-2016-0957 info: name: Adobe AEM Dispatcher 4.15 - Rules Bypass author: geeknik severity:...
sigma-rules
Sigma Rules Community Sigma Rules written by Joe Security for threat hunting in sandboxes, licensed under GPL. For a detailed description about our Sigma rules for Sandboxes please have a look at this Blog Post...
Detection
About This repository contains detection rules and IOCs that we were able to extract and use in the context of our DFIR projects and malware analyses. Contact Follow us on Twitter: https://twitter.com/SIFalconTeam...
Sigma
Sigma Rules A collection of Sigma rules developed at Huntress Labs Twitter: https://twitter.com/embeeresearch https://twitter.com/HuntressLabs License The rules are essentially free to use without restriction, provided that appropriate credit is maintained Author/Owner etc. Detection Rule License...
yara-rules-vt
yara-rules-vt Collection of YARA rules designed for usage through VirusTotal.com, for more information see https://support.virustotal.com/hc/en-us/articles/360015658497-Crowdsourced-Yara-Rules Example VirusTotal pane that contains InQuest signature fires note, you must login to VTI to see these:...
yara-rules
yara-rules A collection of my yara rules...
2023
100 Days of YARA Part 2 - Electric Detectaloo Apologies in advance for the terrible naming, but welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! Fo...
DaysOfYARA-2023
100 Days of YARA Part 2 - Electric Detectaloo Apologies in advance for the terrible naming, but welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! Fo...
copy-as-yara
Copy as YARA Author: alden Copy disassembly nicely formatted for YARA rules. Description: This is a really simple plugin that allows you to copy disassembly in a way that can be used in YARA rules. You have the option to either copy the assembly code as it is or use address wildcarding to create...
detection-validation
Detection-Validation Purpose The tool automates the process of simulating malicious process events without need to go through setup of real processes. Suppose you want to test w3wp.exe spawning Powershell, you will need to go through iis setup to simulate w3wp.exe events, which is a consuming tas...
AfterLife
AFTERLIFE Revocation Persistence Detection Lab When the password reset succeeds but the attacker never leaves. A local red/blue lab for one vulnerability class: the credential that outlives the event that was supposed to kill it. It ships the exploit, the root cause, the fix, a three-rule detecti...
cve-2023-23397-detection-lab
CVE-2023-23397 Detection & Mitigation Research Lab Overview This project is a defensive cybersecurity research lab focused on the network behavior associated with CVE-2023-23397. The project studies suspicious outbound SMB and NTLM authentication from a Windows endpoint and demonstrates a complet...
PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability
PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability LEGAL DISCLAIMER AND TERMS OF USE The Proof of Concept PoC code and technical information provided in this document are intended solely for educational purposes, academic research, and authorized security testing...
Melkor_ELF_Fuzzer
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- - | -- DESCRIPTION -- | - -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- - Melkor - An ELF File Format Fuzzer Melkor, a fictional character from J. R. R. Tolkien's Middle-earth legendarium, was the first Dark Lord and master of Sauron. He's mentioned...