461 matches found
hostintel
hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
BRIntelcollector
BRIntelcollector Overview The BRIntelcollector is a Cyber Threat Intelligence CTI tool focused on Brazilian national threat indicators. The tool allows searching and consolidating information about cyber threats through multiple intelligence sources, facilitating the creation of a centralized...
gau
getallurls gau getallurls gau obtiene URLs conocidas de AlienVault's Open Threat Exchange, Wayback Machine, Common Crawl y URLScan para cualquier dominio dado. Inspirado en waybackurls de Tomnomnom. Recursos Uso Instalación Nota sobre ohmyzsh Uso: Ejemplos: $ printf example.com | gau $ cat...
AlienVault OSSIM av-centerd RCE (CVE-2014-3804)
Exploits CVE-2014-3804 command injection in the av-centerd updatesysteminfodebianpackage SOAP method. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """AlienVault OSSIM av-centerd SOAP RCE CVE-2014-3804 — execute session.""" from future import annotations import r...
AlienVault OSSIM - av-centerd SOAP RCE Detection (CVE-2014-3804)
Detects CVE-2014-3804 by POSTing updatesysteminfodebianpackage SOAP with injected ;id to av-centerd default port 40007. !/usr/bin/env python3 -- coding: utf-8 -- """AlienVault OSSIM av-centerd SOAP RCE CVE-2014-3804.""" import re from kittysploit import from lib.protocols.http.httpclient import...
AlienVault USM Login Panel Detection
An AlienVault USM login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An AlienVault USM login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AlienVault USM Login Panel...
CVE-2009-4374
Directory traversal vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. dot dot in the iddocument paramet...
CVE-2009-4373
Unrestricted file upload vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then...
EUVD-2012-3781
Malware in sbrugna...
EUVD-2015-3490
Malware in sbrugna...
EUVD-2013-5161
Malware in sbrugna...
EUVD-2014-5057
Malware in sbrugna...
EUVD-2009-4342
Malware in sbrugna...
EUVD-2014-4084
Malware in sbrugna...
EUVD-2016-9430
Malware in sbrugna...
EUVD-2017-16008
Malware in sbrugna...
EUVD-2009-4343
Malware in sbrugna...