pybatfish

질문, 피드백 또는 기능 요청이 있으신가요? Slack 커뮤니티에 참여하세요! Pybatfish Pybatfish는 Batfish를 위한 Python 클라이언트입니다. Batfish란 무엇인가요? Batfish는 네트워크 장치의 구성을 분석하여 보안, 신뢰성, 규정 준수에 대한 정확성 보장을 제공하는 네트워크 검증 도구입니다. 장치 구성으로부터 네트워크 동작의 완전한 모델을 구축하고 네트워크 정책기본 제공, 사용자 정의, 모범 사례의 위반을 찾아냅니다. Batfish의 주요 사용 사례는 구성 변경을 배포 전 에 검증하는...

puppet-os-hardening

Puppet OS hardening 1 1 1 2 目次 1. モジュールの説明 - モジュールの機能と有用性 2. セットアップ - oshardening の基本 セットアップ要件 oshardening の導入 3. 使用方法 - 設定オプションと追加機能 Puppet Enterprise に関する重要事項 パラメータ Hiera での使用方法 導入・削除したいパッケージと無効化するサービスに関する注意事項 4. 制限事項 - OS 互換性など 5. 開発 - モジュールへの貢献ガイド 6. テスト - コード変更に対する品質ゲート ローカルテスト PDK テスト...

chef-os-hardening

os-hardening Chef cookbook 1 2 説明 このcookbookは、数多くのセキュリティ関連設定を提供し、全体的な基本保護を実現します。 以下の設定を行います: パッケージ管理の設定（例: 署名済みパッケージのみを許可） 既知の問題があるパッケージの削除 pam および pamlimits モジュールの設定 Shadow password suite の設定 システムパス権限の設定 ソフトリミットによるコアダンプの無効化 システムコンソールへのrootログインの制限 SUIDの設定 sysctlによるカーネルパラメータの設定 以下のことは行いません:...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

CVE-2020-13937

CVE-2020-13937 1. Vulnerability Description： Apache Kylin has a RESTful API that exposes configuration information without any authentication. 2. Reproduction Vulnerable comparison Non-vulnerable comparison Writing PoC Verify correct single URL: pocsuite -r CVE-2022-26134.py -u url Verify...

MalConfig

MalConfig This is part of a module for the framework that i'm constantly developing. Robots images are provided by robohash.org Flag icons are provided by famfamfam The decoders were mostly making use of Androguard to extract the C2 or malware authors' credentials One of the decoder is making use...

CVE-2020-23588

CVE-2020-23588 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a cross-sit...

opendcim-exploit

openDCIM - SQLi to RCE via Config Poisoning Remote code execution chain targeting openDCIM's install.php LDAP configuration form. Built on the VulnCheck go-exploit framework. Vulnerability Chain | CVE| CWE| Description ---|---|---|--- 1| CVE-2026-28515| CWE-862| install.php performs no role check...

chaps

CHAPS: 構成強化評価 PowerShell スクリプト CHAPS は、追加の評価ソフトウェア（Microsoft Policy Analyzer や商用ツールなど）をインストールできない環境で、Windows システムのセキュリティ構成をチェックするための読み取り専用スクリプトのセットです。産業用制御システム（ICS）および運用技術環境（エンジニア/オペレーター用ワークステーション、HMI システム、ヒストリアン、管理サーバー）向けに設計されていますが、任意の Windows システムで動作します。 CHAPS は、Microsoft Security Compliance...

Memory-analysis

Memory-analysis Contains tools to perform malware and forensic analysis in Memory. Plugins: Dyrescan.py - parses Dyreconfig in memory. Rat9002.py - parses 9002 rat config in memory. plugx.py - parses plugx config in memory modified to also parse config size: 0x170c. ghostrat.py - parses ghostrat...

burpa

burpa: Burp Automator A Burp Suite Automation Tool Requirements burp-rest-api Burp Suite Professional slackclient Usage $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT...

prometheus

Installing Prometheus Prometheus is a Ruby application and will run on any system running a recent version 1.8.7 or higher of Ruby. To install Prometheus use the following steps: 1. Create a directory called prometheus. 2. Extract the prometheus files into the directory. 3. CD into the prometheus...

aws_public_ips

awspublicips Table of Contents What's it for Quick start CLI reference Configuration IAM permissions Changelog Contributing Getting in touch What's it for awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CL...

needrestart-privesc-cve-2024-48990

needrestart Privilege Escalation CVE-2024-48990 This repository contains a minimal local privilege escalation exploit targeting a vulnerability in needrestart CVE-2024-48990. The vulnerability allows arbitrary Perl code execution as root by abusing the -c configuration option, which is parsed and...

cve-2022-23134-poc-and-writeup

CVE-2022-23134 Writeup と POC これは、特定バージョンの Zabbix に対する CVE-2022-23134 の POC と writeup です。エクスプロイトの使用に必要な詳細は writeup.md をお読みください。MySQL のセットアップが必要です！...

leakdb

LeakDB LeakDB is a tool set designed to allow organizations to build and deploy their own internal plaintext "Have I Been Pwned"-like service. The LeakDB tool set can normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale, without the need to distribute large...

CVE-2023-27524

CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is running with an insecure default configuration CVE-2023-27524. The script checks if a Superset server's session cookies are signed with any well-known default Flask SECRETKEYs. The --validate flag can be...

KeePass-CVE-2023-24055

KeePass-CVE-2023-24055 KeePass CVE-2023-24055 Reproduction KeePass CVE-2023-24055 Reproduction 1. Prepare machines: Kali 192.168.232.129, Windows 10 192.168.232.128 2. Keepass version: 2.53 2. Principle: By modifying the KeePass configuration file KeePass.config.xml, add a trigger configuration...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program mallory -config path/to/config.jso...

puppet-ssh-hardening

Puppet SSH ハードニング 説明 このPuppetモジュールは、安全なssh-clientおよびssh-server設定を提供します。 要件 Puppet Puppetモジュール: saz/ssh = 2.3.6、puppetlabs/stdlib = 4.2.0 パラメータ ipv6enabled = false - IPv6が必要な場合はtrue cbcrequired = false -...