browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

catsploit

CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...

Misconfiguration-Manager

Misconfiguration Manager 교정 빠른 시작 1. 알려지고 문서화된 공격 기법 목록과 이에 대응하는 방어 기법을 검토하여 환경에 존재할 수 있는 문제와 이를 교정하는 방법을 파악합니다 이 프로젝트 소개를 참고하세요 2. ConfigManBearPig를 실행하고 결과를 BloodHound에서 무료로 시각화합니다 이 연습 안내를 참고하세요 3. 또는 MisconfigurationManager.ps1을 실행합니다 이 연습 안내를 참고하세요 4. 식별된 잘못된 구성을 위한 완화 조치를 구현합니다 이 연습 안내또는 이 ...

GOAD

GOAD v3 🔖 문서 : https://orange-cyberdefense.github.io/GOAD/ 설명 GOAD는 펜테스트 Active Directory LAB 프로젝트입니다. 이 랩의 목적은 펜테스터들이 일반적인 공격 기술을 연습할 수 있도록 즉시 사용 가능한 취약한 Active Directory 환경을 제공하는 것입니다. !CAUTION 이 랩은 매우 취약하므로, 환경 구축에 이 레시피를 재사용하지 말고 격리 없이 인터넷에 배포하지 마십시오이는 권장 사항이며, 사용에 따른 책임은 본인에게 있습니다. 이 저장소는 펜테...

APT-GUID

프로젝트 소개 APT 분야의 자료를 정리한 것으로, 다음 측면을 포함하되 이에 국한되지 않습니다. APT 공격 도구 APT 분석 보고서 APT 공격 기법 도구 정리 정보 수집 능동 정보 수집 EyeWitness 는 웹사이트의 스크린샷을 캡처하고, 일부 서버 정보를 제공하며, 가능한 경우 기본 자격 증명을 식별합니다. https://github.com/ChrisTruncer/EyeWitness AWSBucketDump 는 전리품을 찾기 위해 AWS S3 버킷을 빠르게 열거하는 데 사용할 수 있는 도구입니다...

An analysis of incidents at Brazilian educational institutions

Introduction Because of the amount of data that can be obtained and the high impact that successful attacks may have, educational institutions are frequent targets of cybercriminals. Both public and private schools and universities rely on software for managing personally identifiable information...

Data Agents under Attack: Vulnerabilities in LLM-Driven Analytical Systems

Data agents integrate LLM-driven reasoning with relational data access, executable analytical tools, and multi-step workflow orchestration, making them increasingly central to enterprise analytics. This integration introduces new security vulnerabilities across data resources, database execution,...

SWPT-Notes

SWPT-Notes Personal study notes compiled while working throug...

SMSI: System Model Security Inference: Automated Threat Modeling for Cyber-Physical Systems

Threat modeling for cyber-physical systems CPS remains a largely manual exercise. This project presents SMSI System Model Security Inference, a hybrid neuro-symbolic pipeline that starts from a SysML architecture model and produces a prioritized list of NIST 800-53 security controls. The prototyp...

Cyber Defense Benchmark: Agentic Threat Hunting Evaluation for LLMs in SecOps

We introduce the Cyber Defense Benchmark, a benchmark for measuring how well large language model LLM agents perform the core SOC analyst task of threat hunting: given a database of raw Windows event logs with no guided questions or hints, identify the exact timestamps of malicious events. The...

sigma-audit

Sigma Stack Audit Full-spectrum security audit combining five...

EUVD-2019-19731

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...

CAM-LDS: Cyber Attack Manifestations for Automatic Interpretation of System Logs and Security Alerts

Log data are essential for intrusion detection and forensic investigations. However, manual log analysis is tedious due to high data volumes, heterogeneous event formats, and unstructured messages. Even though many automated methods for log analysis exist, they usually still rely on domain-specif...

PT-2026-2371

Name of the Vulnerable Software and Affected Versions Aero CMS version 0.0.1 Description Aero CMS version 0.0.1 has a SQL injection issue in the author parameter. This allows manipulation of database queries using boolean-based, error-based, time-based, and UNION query techniques. Successful...

PT-2025-50744

Name of the Vulnerable Software and Affected Versions Xhibiter NFT Marketplace version 1.10.2 Description The Xhibiter NFT Marketplace software has a SQL injection issue in the collections endpoint. An attacker can manipulate database queries by using the id parameter. Boolean-based, time-based,...

How BAS Helps Threat Exposure Management: A Complete Guide

Your vulnerability scanner just produced a report with hundreds of "critical" CVEs. Now what? For most security teams, this is where the guessing game begins. You know you can't fix everything at once, so you're forced to make tough calls based on CVSS scores and gut feelings, all while hoping yo...

StealthCup: Realistic, Multi-Stage, Evasion-Focused CTF for Benchmarking IDS

Intrusion Detection Systems IDS are critical to defending enterprise and industrial control environments, yet evaluating their effectiveness under realistic conditions remains an open challenge. Existing benchmarks rely on synthetic datasets e.g., NSL-KDD, CICIDS2017 or scripted replay frameworks...

The Death of the Security Checkbox: BAS Is the Power Behind Real Defense

Security doesn't fail at the point of breach. It fails at the point of impact. That line set the tone for this year's Picus Breach and Simulation BAS Summit , where researchers, practitioners, and CISOs all echoed the same theme: cyber defense is no longer about prediction. It's about proof. When...

Disrupting threats targeting Microsoft Teams

The extensive collaboration features and global adoption of Microsoft Teams make it a high-value target for both cybercriminals and state-sponsored actors. Threat actors abuse its core capabilities – messaging chat, calls and meetings, and video-based screen-sharing – at different points along th...

PT-2025-30603 · Undefined · Undefined

ParsedReport CompletenessLow 22-07-2025 CVE-202553770/TOOLSHELL: HUNTING DOWN THE ATTACKER TECHNIQUES &VICTIMS https://theravenfile.com/2025/07/22/cve-2025-53770-toolshell-hunting-down-the-attacker-techniques-victims/ Report completeness: Low Actors/Campaigns: Arcanedoor Threats: Toolshell vuln...