170 matches found
IP-reputation-snort-rule-generator
IP-reputation-snort-rule-generator 公開されているIP/ドメインのレピュテーションデータに基づいて、SnortルールまたはCisco IDSシグネチャを生成するツール NCC Group Plc によってオープンソースとして公開されています - http://www.nccgroup.com/ 開発者: Will Alexander, will dot alexander at nccgroup dot com https://github.com/nccgroup/IP-reputation-snort-rule-generator AGPL...
threat-intel
threat-intel このリポジトリには、Volexityの公開脅威インテリジェンスブログ記事に関連するIoCが含まれています。 これらのIoCに関連する公開ブログ記事は、VolexityのWebサイトで見つけることができます。 以前はこのリポジトリは、Volexityが公開したツールを保存するためにも使用されていました。これらのツールは現在、各ツール専用のリポジトリに移動されており、Volexity GitHubページで見つけることができます。 IOCs これらは年ごとに整理されており、各年の中の各フォルダは特定の記事に対応しています。...
Re2Pcap
Re2Pcap: 원시 HTTP 요청 또는 응답에서 몇 초 만에 PCAP 파일 생성 Re2Pcap은 Request2Pcap과 Response2Pcap의 약자입니다. 커뮤니티 사용자는 Re2Pcap을 사용하여 빠르게 PCAP 파일을 생성하고 Snort 규칙에 대해 테스트할 수 있습니다. Re2Pcap을 사용하면 아래와 같은 원시 HTTP 요청에 대한 PCAP 파일을 빠르게 생성할 수 있습니다. root@kitploit: POST /admin/tools/iplogging.cgi HTTP/1.1 Host: 192.168.13.31:8...
Log4Shell_CVE-2021-44228_related_attacks_IOCs
Log4Shell（CVE-2021-44228）관련 공격 IOCs 소스 IP가 Apache Log4j RCE를 사용하여 공격을 시도하며, 여기에는 상당 부분 Tor 노드가 포함되어 있습니다. 자세한 내용은 Attack-IP.md를 참조하십시오. log4j 취약점을 통해 유포되는 악성 프로그램, Botnet 등의 IOC는 IOC-C2.md를 참조하십시오. Snort 탐지 규칙은 Snort.md를 참조하십시오. Suricata 규칙은 Suricata.md를 참조하십시오...
heyserial
헤이 시리얼! 저자: Alyssa Rahman @ramen0x3f 생성일: 2021-10-27 최종 업데이트: 2021-12-02 블로그: https://www.mandiant.com/resources/hunting-deserialization-exploits 이 도구와 그 뒤에 있는 연구 과정에 대한 자세한 내용은 저희 블로그를 확인하세요! 설명 프로그래밍 방식으로 역직렬화 익스플로잇에 대한 헌팅 규칙을 생성합니다. 여러 가지 키워드 예: cmd.exe 가젯 체인 예: CommonsCollection 객체 유형 예:...
Suricata IDPE 8.0.6
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
Suricata IDPE 8.0.5
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
Suricata IDPE 8.0.4
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
CVE-2026-20007
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
CVE-2026-20007
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
CVE-2026-20007
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
CVE-2026-20007 Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
PT-2026-23010
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
PT-2026-7483
Heads up, folks: Microsoft's February 2026 Patch Tuesday is out, dropping 55 vulnerability fixes across various products. Among these is CVE-2025-59498, which Microsoft has explicitly marked as Critical. This update is significant, addressing a broad spectrum of security issues. While the specifi...
Suricata IDPE 8.0.3
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell 핵심 패키지 📦 포함 파일 1. 취약한 Do...
EUVD-2021-27303
Malware in sbrugna...
EUVD-2016-2562
Malware in sbrugna...
Nvidia and Adobe vulnerabilities
Cisco Talos' Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Nvidia and one in Adobe Acrobat. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's third-party vulnerability disclosure policy...
Suricata IDPE 7.0.12
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...