CVE-2021-42560

CVE-2021-42560 : Analyse XML non sécurisée dans MITRE Caldera Le plugin Debrief dans Caldera versions =2.9.0 reçoit des paramètres « SVG » encodés en base64 lors de la génération d'un PDF. Ces SVG sont analysés de manière non sécurisée et peuvent être utilisés pour des attaques XXE par exemple,...

CVE-2021-42558

CVE-2021-42558: Mehrere Cross-Site-Scripting-Schwachstellen in MITRE Caldera Caldera Versionen =2.8.1 enthält mehrere reflektierte, persistente und Self-XSS-Schwachstellen, die sowohl von authentifizierten als auch nicht authentifizierten Angreifern ausgenutzt werden können. Offenlegung durch den...

caldera-crater

Crater Crater è il Caldera Rat. Si trova nella cartella crater/. Compilazione Crater richiede Mono 64 bit per essere compilato. Una volta installato Mono, Crater viene compilato eseguendo buildall.bat...

caldera-agent

وكيل CALDERA يحتوي مجلد calderaagent على الكود المصدري لوكيل CALDERA أو cagent ، وهي خدمة ويندوز تسهّل التواصل بين خادم CALDERA وRats الخاصة بـ CALDERA. يجب تثبيت برنامج cagent على كل جهاز يشارك في عملية محاكاة الخصم. وبمجرد تكوينه، سيتصل بخادم CALDERA ويُضاف كخيار للمشاركة في عملية. متطلبات...

CVE-2021-42562

CVE-2021-42562: MITRE Caldera 中的不当访问控制 Caldera（版本 = 2.8.1）未能正确隔离用户权限，导致非管理员用户能够访问、读取和修改本应仅供管理员访问的配置或其他组件。 供应商披露： 此漏洞的供应商披露可在此处找到。 要求： 此漏洞需要： 有效的非管理员用户凭据 概念验证： 更多详细信息和利用过程可在此 PDF 中找到。 其他资源： 此漏洞允许非管理员用户在 MITRE Caldera 中利用漏洞 CVE-2021-42559：在 MITRE Caldera 中通过配置进行命令注入 以实现远程代码执行。...

zeek-caldera-detector

zeek-caldera-detector zeek-caldera-detector è un pacchetto basato su Zeek per rilevare beacon Caldera e download di agenti. È progettato per identificare attività sospette associate ai framework C2 Caldera, inclusi Sandcat, Ragdoll e Manx. Questo pacchetto fornisce meccanismi robusti per monitora...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

CVE-2021-42561

CVE-2021-42561: Iniezione di comandi tramite il plugin Human in MITRE Caldera In Caldera versioni =2.8.1 il plugin Human passa il parametro name non sanificato a una funzione Python "os.system". Ciò consente agli aggressori di utilizzare metacaratteri di shell ad es. backtick "" o parentesi con...

CVE-2021-42559

CVE-2021-42559: Befehlseinschleusung über Konfigurationen in MITRE Caldera Caldera Versionen =2.8.1 enthält mehrere Start-„Requirements“, die beim Starten des Servers Befehle ausführen. Da diese Befehle über die REST-API geändert werden können, kann ein authentifizierter Benutzer beliebige Befehl...

Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting

Caldera Forms WordPress plugin 1.9.7 contains a reflected cross-site scripting caused by lack of validation and escaping of the cf-api parameter in responses, letting attackers execute arbitrary scripts in victim's browser, exploit requires attacker to craft a malicious request. id: CVE-2022-0879...

soc-automation-lab

Laboratorio di Automazione SOC Questo repository documenta la progettazione, la logica di rilevamento, i flussi di lavoro di automazione e le lezioni apprese dalla costruzione di un SOC demo automatizzato utilizzando strumenti open-source. Il progetto si concentra su come gli alert passano dal...

CVE-2001-1576

Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument...

CVE-2022-0879

The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting...

CVE-1999-0712

A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...

The vulnerability of the Manx and Sandcat plugins in the Caldera automated system for emulating intruder actions allows an intruder to execute arbitrary code.

The vulnerability of the Manx and Sandcat plugins in the Caldera intrusion simulation software involves a lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Bounty Hunter: Autonomous, Comprehensive Emulation of Multi-Faceted Adversaries

Adversary emulation is an essential procedure for cybersecurity assessments such as evaluating an organization's security posture or facilitating structured training and research in dedicated environments. To allow for systematic and time-efficient assessments, several approaches from academia an...

EUVD-2021-11808

Malware in sbrugna...

EUVD-2002-0879

Malware in sbrugna...

EUVD-2002-0876

Malware in sbrugna...

EUVD-2001-0181

Malware in sbrugna...