PENTEST-LAB

PENTEST-LAB 一个现代化的易受攻击应用与网络靶场，用于通过动手攻击链学习 Web、API、云、 AI 和蓝队安全 。 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║ ██╔══██╗██╔════╝████╗ ██║╚══██╔══╝██╔════╝██╔════╝╚══██╔══╝ ║ ║ ██████╔╝█████╗ ██╔██╗ █...

Cyber-Attack-Simulation-

网络攻击模拟- Log4Shell CVE-2021-44228...

Dragonfish-s-Malware-Cyber-Analysis

此存储库没有 README。...

IntelligentProcessLifecycle

IntelligentProcessLifecycle El ciclo de vida inteligente de procesos de los defensores cibernéticos activos Descripción Este GitHub aloja los archivos del póster relacionados con las categorías de falsos positivos y errores en los servicios de operaciones de seguridad. El objetivo es definir un...

cve-2025-2082

特斯拉如何被黑？ — 交互式场景应用 该项目基于 Synacktiv 安全公司发现的一个真实漏洞（TPMS → VCSEC → CAN Bus 链），是一个交互式网络安全场景。 该场景旨在通过戏剧化的方式，教导人们如何利用特斯拉 Model 3 在2024年存在的一个易受攻击的协议来入侵车辆。 通过时间和情节线进行叙述。 根据用户的选择推进。 旨在提高对信息物理系统安全的认识。 目标 通过此场景，以下概念将以游戏化的形式教授： TPMS（轮胎压力监测系统）协议 整数溢出漏洞 CAN 总线架构 VCSEC（车辆安全模块） 警告 此应用程序仅用于教育目的。...

priority-intelligence-requirements-dev

Developing Priority Intelligence Requirements @ Red Hat v1.1 In the rapidly evolving landscape of cyber threat intelligence CTI, the formulation of Priority Intelligence Requirements PIRs stands as a crucial component of your CTI program and the planning and direction phase of the intelligence...

Ukraine-Cyber-Operations

Operaciones Cibernéticas de Ucrania Curated Intelligence está trabajando con analistas de todo el mundo para proporcionar información útil a las organizaciones en Ucrania que buscan inteligencia de amenazas gratuita adicional. Slava Ukraini. Gloria a Ucrania. Blog | Twitter | LinkedIn Recursos...

awesome-cyber-skills

awesome-cyber-skills Una lista seleccionada de entornos de hacking donde puedes entrenar tus habilidades cibernéticas de forma gratuita, legal y segura Acerca de la Lista En el campo de la Seguridad de la Información, comprender al enemigo, el hacker, es crucial. Al conocer a tu enemigo, puedes...

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006 where "GTG" stand...

statecraftcyber

Statecraft Cyber Intelligence Plataforma de inteligencia de amenazas en portugués construida desde cero como proyecto personal de Blue Team. Agrega datos de fuentes abiertas globales y los transforma en briefings técnicos, noticias clasificadas, CVEs enriquecidos e IOCs estructurados — todo en...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

OpenPLC_v3

OpenPLC Runtime versión 3 ⚠️ Este proyecto ha llegado al final de su ciclo de vida y ya no se mantiene. Ha sido reemplazado por OpenPLC Runtime v4. Visite el nuevo repositorio para obtener instrucciones de instalación, documentación y soporte. OpenPLC es un Controlador Lógico Programable de código...

CVE-2026-20281

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:29+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:05+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 13:45:12+00:00| seen|...

Dell PowerProtect Cyber Recovery < 20.3.0.0 Multiple Vulnerabilities (DSA-2026-370)

The version of Dell PowerProtect Cyber Recovery installed on the remote host is prior to 20.3.0.0. It is, therefore, affected by multiple vulnerabilities: - Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command 'SQ...

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. "The Fairwind Program gives high-priority defenders like governments,...

A SoK for SoCs: Reading the TI Leaves on AI for Cyber Threat Intelligence Generation and Sharing

Cyber Threat Intelligence CTI is essential for defending mission-critical infrastructure, yet the process of transforming raw attack evidence into shareable CTI remains fragmented and understudied. We conduct a literature survey of academic papers, organizing the CTI lifecycle into three stages:...

Using LLMs to Elicit Security Requirements for Service-Oriented Cyber Ranges

Cyber ranges are complex environments comprising many interacting components and stakeholders with different security concerns. The Service-Oriented Cyber Range SOR is no exception, particularly when it comes to training scenarios targeting critical infrastructure. Security concerns are translate...

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional...

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...