MalwLess

MalwLess सिमुलेशन टूल MST MalwLess एक ओपन सोर्स टूल है जो आपको प्रक्रियाओं या PoCs को चलाए बिना सिस्टम समझौता या हमले के व्यवहार का अनुकरण करने की अनुमति देता है। यह टूल ब्लू टीम डिटेक्शन और SIEM सहसंबंध नियमों का परीक्षण करने के लिए डिज़ाइन किया गया है। यह नियमों पर आधारित एक ढाँचा प्रदान करता ह...

attack_range

Splunk Attack Range v5 يبني Splunk Attack Range بيئات سحابية مجهزة بالأدوات AWS, Azure, GCP، ويحاكي الهجمات، ويُمرر البيانات إلى Splunk لتطوير الكشف والاختبار. ما يفعله: بناء مختبرات — نشر مختبر صغير يشبه الإنتاج Splunk، خوادم Windows/Linux، اختياري Kali، Zeek، إلخ عبر Terraform وAnsible. محاكاة...

nccfsas

परिचय यह रिपॉजिटरी NCC Group की Full Spectrum Attack Simulation FSAS टीम द्वारा सार्वजनिक रूप से जारी की गई जानकारी रखती है।...

gotestwaf

GoTestWAF GoTestWAF API और OWASP हमला सिमुलेशन के लिए एक उपकरण है जो REST, GraphQL, gRPC, SOAP, XMLRPC और अन्य सहित API प्रोटोकॉल की एक विस्तृत श्रृंखला का समर्थन करता है। इसे वेब एप्लिकेशन सुरक्षा समाधानों, जैसे API सुरक्षा प्रॉक्सी, वेब एप्लिकेशन फ़ायरवॉल, IPS, API गेटवे और अन्य का मूल्यांकन कर...

robodroid

RoboDroid RoboDroid هي أداة برمجية متطورة مصممة لتبسيط عملية إدارة آلات Android وقريباً جداً أيضاً نشرها لاستخدامها في بيئات ميادين التدريب على الأمن السيبراني. باستخدام RoboDroid، يمكن للمستخدمين إعداد وتخصيص سلوكيات محددة مسبقاً لآلات Android الخاصة بهم، مما يسمح لهم بإنشاء سيناريوهات هجوم...

http2-security-lab

🦣 TuskMads مختبر أمان HTTP/2 مختبر من الصفر لمحاكاة هجمات HTTP/2 والدفاع عنها، مبني بلغة Python خالصة. ماذا يفعل هذا يحاكي 3 هجمات HTTP/2 حقيقية ضد خادم ضعيف، ثم يوضح 5 طبقات دفاع تحجب جميع الهجمات الثلاثة على خادم محصّن. الهجمات المنفذة الهجوم| التقنية| التأثير ---|---|--- Slowloris| فتح دفق وعد...

TTPForge

TTPForge TTPForge هي منصة لمحاكاة الهجمات السيبرانية، صمّمها وبناؤها Sam Manzer @d3sch41n وAlek Straumann @CrimsonK1ng وGeoff Pamerleau @Sy14r، مع مساهمات لاحقة من العديد من الزملاء في فرق الأمن الحمراء والزرقاء والأرجوانية في Meta. وقد نقل Jayson Grace @l50 المشروع إلى GitHub وساعد في التحضير...

AtomicTestHarnesses

AtomicTestHarnesses AtomicTestHarnesses هي مكتبة تحاكي وتتحقق من تنفيذ تقنية الهجوم. تتكون من وحدة Powershell لتشغيل تقنيات الهجوم على Windows وحزمة Python للتشغيل على macOS و Linux يمكن أن تختلف تفاصيل تقنية من هجوم إلى آخر؛ تراعي AtomicTestHarnesses ذلك من خلال السماح لك بتنفيذ العديد من...

Cyber-Attack-Simulation-

Cyber-Attack-Simulation- Log4Shell CVE-2021-44228...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

soc-automation-lab

SOC Automation Lab यह रिपॉजिटरी ओपन-सोर्स टूल्स का उपयोग करके एक स्वचालित SOC डेमो बनाने के दौरान डिज़ाइन, डिटेक्शन लॉजिक, ऑटोमेशन वर्कफ़्लो और सीखे गए सबक का दस्तावेज़ीकरण करती है। परियोजना इस पर केंद्रित है कि अलर्ट डिटेक्शन से इन्वेस्टिगेशन और नोटिफिकेशन तक कैसे जाते हैं , और रास्ते में क्या...

From Attack Simulation to SIEM Rule: Deterministic Detection-As-Code Synthesis with Probe-Level Traceability

Security teams routinely simulate attacks against their own systems to check whether their monitoring would catch a real intruder. These Breach-and-Attack-Simulation BAS tools surface findings, but the security information and event management SIEM systems that watch production need detection rul...

CrowdStrike vs Hive Pro: VM Compared

CrowdStrike vs Hive Pro for Vulnerability Management CrowdStrike vs Hive Pro is not a simple feature checklist. It is a decision about how your security team wants to manage exposure: through an endpoint-centered platform that extends into vulnerability assessment, or through a vendor-neutral...

Security Analysis of a Communication Protocol: MQTT

This paper analyzes the security of the Message Queuing Telemetry Transport MQTT protocol in the context of the Internet of Things IoT. The main objective consists of identifying vulnerabilities and proposing security improvements. Adopting a hybrid methodology, a theoretical review was combined...

Benefits of Breach and Attack Simulation in Vulnerability Management

Vulnerability management teams face an overwhelming challenge: tens of thousands of CVEs published annually, limited remediation capacity, and no reliable way to separate genuine threats from background noise. Traditional approaches rely on CVSS scores and scanner output, but these methods lack t...

What Is a Risk-Based Vulnerability Management Platform?

A vulnerability scanner tells you where the cracks are in your defenses, but it doesn't tell you which ones an attacker will actually use. To truly understand your exposure, you need to see your network from their perspective. How can a low-severity flaw on one server be combined with a...

What Is a Risk-Based Vulnerability Management Tool?

Your security team is talented, but they aren't miracle workers. With a persistent skills shortage and ever-tightening budgets, asking them to patch every single vulnerability is not just unrealistic; it's inefficient. Chasing low-risk issues wastes valuable time and leads to burnout, all while...

What Makes a Vulnerability Management Dashboard Effective?

Let's be direct: a high CVSS score doesn't mean a vulnerability is a top priority for your organization. Attackers don't care about theoretical scores; they care about clear, exploitable pathways to your critical assets. If your vulnerability management dashboard is only showing you generic...

simple-ids

Simple IDS - Intrusion Detection System !License: MIThttp...

External Attack Surface Management: What It Is, Why It Matters, and How to Get It Right

Every organization with internet-facing assets has an external attack surface. The question is whether you can see all of it before an attacker does. External attack surface management EASM gives security teams the continuous visibility, context, and control they need to find and fix exposures...