IP-reputation-snort-rule-generator

IP-reputation-snort-rule-generator 公開されているIP/ドメインのレピュテーションデータに基づいて、SnortルールまたはCisco IDSシグネチャを生成するツール NCC Group Plc によってオープンソースとして公開されています - http://www.nccgroup.com/ 開発者: Will Alexander, will dot alexander at nccgroup dot com https://github.com/nccgroup/IP-reputation-snort-rule-generator AGPL...

threat-intel

threat-intel 本仓库包含与 Volexity 公开威胁情报博客文章相关的 IoC（失陷指标）。 关于这些 IoC 的公开博客文章可在 Volexity 网站 上找到。 过去，本仓库还用于存放 Volexity 发布的工具。这些工具现已迁移到专门的独立工具仓库中，可在 Volexity GitHub 页面 上找到。 IOCs 它们按年份组织，在每一年内，每个文件夹对应一篇特定的文章。 每篇文章大致遵循相同的文件夹结构——如果该文章没有适用的数据，某些文件或文件夹可能会缺失。 root@kitploit: YYYY-MM-DD - Title indicators.csv...

Re2Pcap

Re2Pcap: 生のHTTPリクエストまたはレスポンスから数秒でPCAPファイルを作成 Re2Pcap は Request2Pcap と Response2Pcap の略称です。コミュニティユーザーは Re2Pcap を使用して迅速に PCAP ファイルを作成し、Snort ルールに対してテストすることができます。 Re2Pcap を使用すると、以下のような生の HTTP リクエストの PCAP ファイルを素早く作成できます。 root@kitploit: POST /admin/tools/iplogging.cgi HTTP/1.1 Host: 192.168.13.31:80...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs ソースIPはApache Log4j RCEを利用して攻撃を試みています。その多くはTorノードです。詳細はAttack-IP.md log4j脆弱性を悪用して拡散するマルウェア、ボットネットなどのIOCはIOC-C2.mdをご参照ください。 Snort検出ルールはSnort.md SuricataルールはSuricata.md...

heyserial

HEY SERIAL! 作成者: Alyssa Rahman @ramen0x3f 作成日: 2021-10-27 最終更新日: 2021-12-02 ブログ: https://www.mandiant.com/resources/hunting-deserialization-exploits このツールとその背後にある研究プロセスの詳細については、弊社ブログをご覧ください。 説明 デシリアライゼーションの悪用に対するハンティングルールを、複数の要素を組み合わせてプログラム的に作成します。 キーワード（例：cmd.exe） ガジェットチェーン（例：CommonsCollection）...

Suricata IDPE 8.0.6

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

Suricata IDPE 8.0.5

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

Suricata IDPE 8.0.4

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2026-20007 Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

PT-2026-23010

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

PT-2026-7483

Heads up, folks: Microsoft's February 2026 Patch Tuesday is out, dropping 55 vulnerability fixes across various products. Among these is CVE-2025-59498, which Microsoft has explicitly marked as Critical. This update is significant, addressing a broad spectrum of security issues. While the specifi...

Suricata IDPE 8.0.3

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell 핵심 패키지 📦 포함 파일 1. 취약한 Do...

EUVD-2021-27303

Malware in sbrugna...

EUVD-2016-2562

Malware in sbrugna...

Nvidia and Adobe vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Nvidia and one in Adobe Acrobat. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's third-party vulnerability disclosure policy...

Suricata IDPE 7.0.12

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...