47 matches found
zeek-spicy-wireguard
zeek-spicy-wireguard Este paquete proporciona un analizador de protocolo Wireguard basado en Spicy para Zeek. Debe instalar Spicy para usar este paquete. Esta es una implementación sencilla que sigue https://www.wireguard.com/protocol/ Wireguard Registros de Wireguard root@kitploit: separator \x0...
zeek-spicy-ipsec
IPSec Este es un analizador de protocolos Zeek que detecta VPN IPSec basado en Spicy. Debes instalar Spicy para usar este paquete. Un blog que detalla el desarrollo de este analizador: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...
zeek-spicy-openvpn
zeek-spicy-openvpn Este es un analizador de protocolos que detecta tráfico OpenVPN. Debes instalar Spicy para usar este paquete. Blogs y seminarios web que detallan el desarrollo de este analizador de protocolos: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
zeek-spicy-stun
STUN Session Traversal Utilities for NAT STUN Se trata de un analizador de protocolo de Zeek que detecta STUN basado en Spicy. Debe instalar Spicy para usar este paquete. Este paquete creará dos logs: stun.log - Este log contiene todos los mensajes STUN. stunnat.log - Este log contiene las...
zeek-spicy-ospf
zeek-spicy-ospf Este es un analizador de paquetes OSPF v2 y v3 basado en Spicy para Zeek. Debe instalar Spicy para usar este paquete. Enlaces: Lógica original importada de https://github.com/s-wells/spicyparsers/tree/main/ospf, con permiso del autor. https://datatracker.ietf.org/doc/html/rfc2328...
zeek-mercury-npf
Mercury NPF para Zeek Este plugin de Zeek implementa el formato Network Protocol Fingerprinting NPF tal y como se especifica en el proyecto Mercury. Descripción general El plugin inspecciona los siguientes protocolos y genera el NPF para ellos: TCP TLS y DTLS QUIC HTTP SSH OpenVPN requiere la...
zeek-strrat-detector
Un detector de malware STRRAT basado en Zeek Este es un detector de malware STRRAT basado en Zeek Spicy. PCAP https://app.any.run/tasks/4423258f-59bc-4a88-bfec-d8ac08c88538/ Salida de ejemplo root@kitploit: % zeek -Cr strrat-4423258f-59bc-4a88-bfec-d8ac08c88538.pcap zeek-strrat-detector % cat...
zeek-spicy-facefish
FacefishRootkit Este analizador Zeek+Spicy detectará el C2 del rootkit Linux Facefish como se describe en: https://blog.netlab.360.com/sshstealerfacefishen/ https://blogs.juniper.net/en-us/threat-research/linux-servers-hijacked-to-implant-ssh-backdoor...
Regulators around the world are scrutinizing Grok over sexual deepfakes
Grok’s failure to block sexualized images of minors has turned a single “isolated lapse” into a global regulatory stress test for xAI’s ambitions. The response from lawmakers and regulators suggests this will not be solved with a quick apology and a hotfix. Last week we reported on Grok's apology...
EUVD-2025-94944
Malicious code in spicycephalopodz3n npm...
Malicious code in spicy_turkey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6001ec14416892e42685654c67b3b5d8d813a3a3ae2ef3e1d90b7ed3ed8b26c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-117193 Malicious code in spicy_buzzard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60570ff2093da23d0f35a2fddc33dc193cd314a1657346b7c5443cdd18854965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-88693
Malicious code in spicyangelfishz3n npm...
Malicious code in spicy_antlion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f73e8889836e36e0440beed4d93f065bcf7bc7b5ad68d2f607fa6da6976995e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74209
Malicious code in spicybasilisksilver-49 npm...
EUVD-2025-75567
Malicious code in spicystarfish-apptea npm...
Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75568
Malicious code in spicyspider-appteadev npm...
MAL-2025-109012 Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...