msnm-sensor

Description MSNM-S Multivariate Statistical Network Monitoring-Sensor shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM approach and new multivariate statistical methodology for network anomaly detection while th...

Corelight-Ansible-Roles

Corelight-Ansible-Roles Caution: Before you run this version, if you are upgrading, some variable names and locations have changed To get started, simply run this command: source curl https://raw.githubusercontent.com/corelight/Corelight-Ansible-Roles/main/download-run-me-first.sh This product...

Spip-Go

Spip - Network Honeypot Sensor Spip is a lightweight, low-interaction network honeypot sensor. It listens for arbitrary incoming TCP traffic plain and TLS, captures what scanners and bots send, and logs each connection as structured JSON ECS-shaped for easy ingestion into your SIEM or data lake...

snare

SNARE Super Next generation Advanced Reactive honEypot About SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. Documentation The documentation can be found here. Basic Concepts Surface first. Focus on the attack surface generation. Sensors and...

maltrail

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution

The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e., \\sms,...

DShield-SIEM

DShield Sensor Log Collection with Elasticsearch Introduction This is fork and a significant update from the initial publication on the ISC Storm Center website by Scott Jensen as a BACS paper and the scripts published in Github. https://github.com/fkadriver/Dshield-ELK...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

VirtualLockSensorLPE

VirtualLockSensorLPE Descripción Exploit PoC de escalada de privilegios local para CVE-2025-0886 que apunta a Elliptic Virtual Lock Sensor versión 3.1.60531.2 ejecutándose en Windows, instalado por defecto en ciertos modelos de laptop Lenovo. Permite ejecutar una carga útil en el contexto de SYST...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

CVE-2022-0997

Fidelis Network and Deception - CVE-2022-0997 - Escalada de Privilegios por Permisos de Archivo Inseguros Publicación y Agradecimientos El exploit fue aprobado para su publicación pública por el Gobierno de los Estados Unidos. Agradecimientos especiales a los militares y enlaces gubernamentales...

CorelightForSecOps

Collect Corelight Sensor logs This document describes how you can collect Corelight Sensor logs by configuring the Corelight Sensor and a Chronicle forwarder. This document also lists the supported log types and supported Corelight versions. For more information, see Data ingestion to Chronicle...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at : https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf Git repo at...

maltrail

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

fibratus

Fibratus Sensor de seguridad para la detección y protección de amenazas en tiempo real Comenzar » Documentación • Reglas • Filaments • Descargas • Debates Fibratus detecta y erradica tácticas avanzadas de atacantes, malware y amenazas emergentes al examinar y contrastar un amplio espectro de...

msnm-sensor

Descripción MSNM-S Sensor de Monitoreo de Red Estadístico Multivariante muestra la aplicabilidad práctica de los enfoques encontrados en los trabajos de PCA-MSNM y PCA-MSNM Jerárquico. El primero presenta el enfoque MSNM y una nueva metodología estadística multivariante para la detección de...

corelight-client

.. corelight-client: .. Version number is filled in automatically. .. |version| replace:: 1.5.17 ==================================== Corelight Sensor Command Line Client .. contents:: Overview This tool provides a command-line client for the Corelight Sensor , aBro appliance engineered from the...

snare

SNARE Super Nueva generación Avanzado Reactivo honEypot Acerca de SNARE es un sensor honeypot de aplicaciones web que atrae todo tipo de maliciosidad de Internet. Documentación La documentación se puede encontrar aquí. Conceptos básicos Superficie primero. Centrarse en la generación de la...

tsusen

Tsusen 津波センサー es un sensor de red independiente diseñado para recopilar información del tráfico regular proveniente del exterior es decir, Internet de forma diaria p. ej., escaneos masivos, escáneres de servicios, etc.. Cualquier anomalía debe ser observada de cerca, ya que puede convertirse en u...

memhunter

Memhunter Caza automatizada de malware residente en memoria a escala Este proyecto está EN DESARROLLO. Espere cambios de funcionalidad y lanzamientos binarios en las próximas semanas. Resumen Memhunter es una herramienta de sensor de endpoint especializada en detectar malware residente, mejorando...