47 matches found
zeek-spicy-ipsec
IPSec Dies ist ein Zeek-Protokollanalysator, der IPSec-VPN basierend auf Spicy erkennt. Sie müssen Spicy installieren, um dieses Paket zu verwenden. Ein Blog, der die Entwicklung dieses Analysators beschreibt: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs:...
zeek-spicy-ospf
zeek-spicy-ospf Este é um analisador de pacotes OSPF v2 & v3 baseado em Spicy para o Zeek. Você deve instalar Spicy para usar este pacote. Links: Lógica original importada de https://github.com/s-wells/spicyparsers/tree/main/ospf, com permissão do autor...
zeek-spicy-stun
STUN Session Traversal Utilities for NAT STUN Dies ist ein Zeek-Protokollanalysator, der STUN basierend auf Spicy erkennt. Sie müssen Spicy installieren, um dieses Paket zu verwenden. Dieses Paket erstellt zwei Logs: stun.log - Dieses Log enthält jede STUN-Nachricht. stunnat.log - Dieses Log...
zeek-strrat-detector
Un Rilevatore di Malware STRRAT Basato su Zeek Questo è un rilevatore di malware STRRAT basato su Zeek Spicy. PCAP https://app.any.run/tasks/4423258f-59bc-4a88-bfec-d8ac08c88538/ Output di Esempio root@kitploit: % zeek -Cr strrat-4423258f-59bc-4a88-bfec-d8ac08c88538.pcap zeek-strrat-detector % ca...
zeek-spicy-wireguard
zeek-spicy-wireguard Questo pacchetto fornisce un analizzatore di protocollo Wireguard basato su Spicy per Zeek. Devi installare Spicy per usare questo pacchetto. Questa è un'implementazione semplice che segue https://www.wireguard.com/protocol/ Wireguard Log di Wireguard root@kitploit: separator...
zeek-spicy-facefish
FacefishRootkit Questo analizzatore Zeek+Spicy rileva la C2 del rootkit Linux Facefish come descritto in: https://blog.netlab.360.com/sshstealerfacefishen/ https://blogs.juniper.net/en-us/threat-research/linux-servers-hijacked-to-implant-ssh-backdoor...
zeek-spicy-openvpn
zeek-spicy-openvpn Questo è un analizzatore di protocollo che rileva il traffico OpenVPN. Per usare questo pacchetto è necessario installare Spicy. Blog e webinar che descrivono lo sviluppo di questo analizzatore di protocollo: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
zeek-mercury-npf
Mercury NPF for Zeek This Zeek plugin implements the Network Protocol Fingerprinting NPF format as specified in the Mercury project. Overview The plugin inspects the following protocols and generates the NPF for them: TCP TLS and DTLS QUIC HTTP SSH OpenVPN requires installation of...
Regulators around the world are scrutinizing Grok over sexual deepfakes
Grok’s failure to block sexualized images of minors has turned a single “isolated lapse” into a global regulatory stress test for xAI’s ambitions. The response from lawmakers and regulators suggests this will not be solved with a quick apology and a hotfix. Last week we reported on Grok's apology...
EUVD-2025-94944
Malicious code in spicycephalopodz3n npm...
Malicious code in spicy_turkey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6001ec14416892e42685654c67b3b5d8d813a3a3ae2ef3e1d90b7ed3ed8b26c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-117193 Malicious code in spicy_buzzard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60570ff2093da23d0f35a2fddc33dc193cd314a1657346b7c5443cdd18854965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-88693
Malicious code in spicyangelfishz3n npm...
Malicious code in spicy_antlion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f73e8889836e36e0440beed4d93f065bcf7bc7b5ad68d2f607fa6da6976995e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74209
Malicious code in spicybasilisksilver-49 npm...
Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75567
Malicious code in spicystarfish-apptea npm...
EUVD-2025-75568
Malicious code in spicyspider-appteadev npm...
MAL-2025-109012 Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...