Attacker-Group-Predictor

Attacker-Group-Predictor 该工具根据使用的技术和软件预测攻击者组。它基于 MITRE ATT&CK™ 框架进行搜索 工作原理？ 1- 从 https://attack.mitre.org/ 收集关于攻击者组的数据 2- 从用户处获取关于攻击的数据 3- 比较数据并生成结果 安装 git clone https://github.com/omergunal/Attacker-Group-Predictor.git cd Attacker-Group-Predictor/ pip3 install -r requirements.txt 使用 python3...

attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

redxor

C2 de malware Linux 'RedXOR': un ejemplo de detección Este paquete sirve como demostración de cómo se puede usar Zeek para detectar la puerta trasera de Linux "redXOR" mediante métodos basados en estado. Referencias: Blog de Corelight...

PolinRider

PolinRider：朝鲜威胁行为者在数百个GitHub仓库中植入恶意软件 日期： 2026-03-07 最后更新： 2026-04-11 — 请参见下文 4月10–11日更新 严重性： 严重 — 活跃的供应链感染波及 1,950+ 个公开仓库，已确认与 TasksJacker / Contagious Interview 集群实现运营整合 OpenSourceMalware 团队发现了一场大规模威胁活动，该活动正在向 GitHub 用户和组织仓库中植入恶意软件。威胁行为者 PolinRider 已在 数百个公开 GitHub 仓库 （属于 数百个不同的所有者 ）中植入了恶意混淆的...

stride-gpt

STRIDE GPT is an AI-powered threat modelling tool that leverages Large Language Models LLMs to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application details, such as the application type, authentication methods, and whether the...

gitxray

欢迎使用Gitxray Gitxray（Git X-Ray的简称）是一款多功能的GitHub仓库安全工具。它可用于多种用途，包括开源情报（OSINT）和取证分析。gitxray利用公开的GitHub REST API收集原本需要大量手动获取的信息。此外，它还能从非常规位置挖掘信息。 使用场景 Gitxray可用于例如： 在贡献者个人资料中查找意外泄露的敏感信息，例如Armored PGP密钥或密钥名称。 识别仓库中的威胁行为者。可以发现共同拥有或共享的账户，并检查公开事件以发现虚假的标星者。 识别虚假或受感染的仓库。它可以检测被篡改的提交日期，例如发布后更新的发布资产。...

exim-cve-2019-10149-data

Recopilación de Datos de CVE de Exim Recopilación de Datos Relacionada con las Vulnerabilidades de Exim CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 Anuncio de CVE: https://vulners.com/cve/CVE-2019-10149 Detalles del Exploit: https://www.exploit-db.com/exploits/46974 Cronología del Problema:...

CVE-2021-3122-Details

CVE-2021-3122-详情 关于我们如何在AlohaPOS中发现一个CVE的博客文章。 https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

Microweber Information Disclosure

Microweber contains a vulnerability that allows exposure of sensitive information to an unauthorized actor in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0281 info: name: Microweber Information Disclosure author: pikpikcu severity: high description: Microweber contains a...

CVE-2026-106250

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39...

CVE-2026-106199

Incorrect authorization in Actor in Google Chrome on on Android prior...

Linux Distros Unpatched Vulnerability : CVE-2026-106199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to...

Linux Distros Unpatched Vulnerability : CVE-2026-106250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-106191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

CVE-2026-106191

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39...

CVE-2026-106250

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502497790 https://code.google.com/p/chromium/issues/detail?id=106250...

CVE-2026-106191

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502282293 https://code.google.com/p/chromium/issues/detail?id=106191...

DEBIAN-CVE-2026-106250

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-106199

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...