IP-reputation-snort-rule-generator

IP-reputation-snort-rule-generator Una herramienta para generar reglas de Snort o firmas IDS de Cisco basadas en datos públicos de reputación de IP/dominio Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Will Alexander, will punto alexander arroba...

threat-intel

threat-intel Este repositorio contiene IoC relacionados con las publicaciones públicas de inteligencia de amenazas de Volexity. Las publicaciones de blog públicas relacionadas con estos IoC se pueden encontrar en el sitio web de Volexity. En el pasado, este repositorio también se utilizaba para...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs 源IP使用Apache Log4j RCE尝试攻击，其中包含很大部分Tor节点，详见Attack-IP.md 利用log4j漏洞传播的恶意程序、Botnet等IOC详见IOC-C2.md Snort检测规则详见Snort.md Suricata规则详见Suricata.md...

Re2Pcap

Re2Pcap: 在数秒内从原始HTTP请求或响应创建PCAP文件 Re2Pcap 是 Request2Pcap 和 Response2Pcap 的缩写。社区用户可以使用 Re2Pcap 快速创建 PCAP 文件，并针对 Snort 规则进行测试。 Re2Pcap 允许你快速为如下所示的原始HTTP请求创建 PCAP 文件： POST /admin/tools/iplogging.cgi HTTP/1.1 Host: 192.168.13.31:80 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101...

heyserial

HEY SERIAL! 作者： Alyssa Rahman @ramen0x3f 创建时间： 2021-10-27 最后更新： 2021-12-02 博客： https://www.mandiant.com/resources/hunting-deserialization-exploits 有关此工具及研究过程的更多详情，请查看我们的博客！ 描述 以编程方式创建用于检测反序列化漏洞利用的狩猎规则，支持多种 关键词（例如 cmd.exe） 小工具链（例如 CommonsCollection） 对象类型（例如 ViewState、Java、Python Pickle、PHP） 编码方式（例...

Suricata IDPE 8.0.6

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

Suricata IDPE 8.0.5

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

Suricata IDPE 8.0.4

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2026-20007 Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

PT-2026-23010

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

PT-2026-7483

Heads up, folks: Microsoft's February 2026 Patch Tuesday is out, dropping 55 vulnerability fixes across various products. Among these is CVE-2025-59498, which Microsoft has explicitly marked as Critical. This update is significant, addressing a broad spectrum of security issues. While the specifi...

Suricata IDPE 8.0.3

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell 핵심 패키지 📦 포함 파일 1. 취약한 Do...

EUVD-2021-27303

Malware in sbrugna...

EUVD-2016-2562

Malware in sbrugna...

Nvidia and Adobe vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Nvidia and one in Adobe Acrobat. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's third-party vulnerability disclosure policy...

Suricata IDPE 7.0.12

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...