h4cker

Este repositorio es una colección exhaustiva de referencias, scripts, herramientas, código, laboratorios y recursos de formación en ciberseguridad. Está cuidadosamente seleccionado y mantenido por Omar Santos. Resumen El repositorio sirve como material complementario para libros, cursos en vídeo ...

Scanners-Box

English | 简体中文 | Español 简介 Scanners Box 是一个精心策划的 9000+ ⭐ 开源网络安全百宝箱 ——重点关注 AI 自动化安全 Agent 与红蓝队对抗工具 。所有工具全部源代码开放 ，涵盖 10+ 个类别：子域名枚举、IoT 审计、移动端分析、智能合约扫描、云端安全等。 Project A³C A³C — 自主 AI 认证计划 展示A³C 徽章 的项目，即代表已通过 Scanners Box 官方认证 ，为活跃可信的 AI 驱动的自主项目。 A³C 徽章 是 Scanners Box 对开源 AI...

CyberSources

欢迎来到 Cybersources ！该项目是一个中心枢纽，汇集了各种工具、资源和教育材料，专为网络安全专业人士、爱好者和学习者设计。无论你是刚开始入门还是经验丰富的专家，都能找到一切所需来提升技能、紧跟行业趋势，并加深对这一快速演进领域的理解。 🎉 立即加入 Discord 社区（超过 2000 名成员）：http://discord.gg/cybersources 🎉 赞助商： 📋 内容 OSINT OSINT 用户名搜索 电子邮件搜索 电话号码搜索 GEOINT 照片/图像 社交网络 Instagram LinkedIn TikTok OnlyFans Discord Twitch...

awesome-pentest

Awesome Penetration Testing Una colección de increíbles recursos de pruebas de penetración y ciberseguridad ofensiva. Las pruebas de penetración son la práctica de lanzar ataques autorizados y simulados contra sistemas informáticos y su infraestructura física para exponer posibles debilidades y...

rawsec-cybersecurity-inventory

Rawsec 的网络安全清单 名称| 链接 ---|--- 网站| link 文档| link Git 仓库| link Git 仓库（镜像）| link 合并请求| link 问题| link Wiki| link 聊天| link 有关贡献、开发、使用或问题，请查阅文档。 赞助商 如果您计划赞助此项目，请联系我或 Porchetta Industries。 官方 Discord 频道 Rawsec 的网络安全清单在 Porchetta Industries Discord 服务器中有一个频道，此外还有许多其他开源安全工具的频道。 Porchetta Industries 该清单在...

rawsec-cybersecurity-inventory

Rawsec 网络安全清单 名称| 链接 ---|--- 网站| 链接 文档| 链接 Git 仓库| 链接 Git 仓库（镜像）| 链接 合并请求| 链接 问题| 链接 维基| 链接 聊天| 链接 有关贡献、开发、使用或问题，请查看文档。 赞助商 如果您计划赞助此项目，请联系我或Porchetta Industries。 官方 Discord 频道 Rawsec 网络安全清单在 Porchetta Industries Discord 服务器中有一个频道，此外还有许多其他开源安全工具的频道。 Porchetta Industries 该清单在 Rawsec Discord...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

Large Language Models for Cyber Security

This paper studies the integration off Large Language Models into cybersecurity tools and protocols. The main issue discussed in this paper is how traditional rule-based and signature based security systems are not enough to deal with modern AI powered cyber threats. Cybersecurity industry is...

6 Essential AI Cybersecurity Tools for Your Stack

Is your security team spending more time chasing low-level alerts than hunting for genuine threats? It’s a common problem that leads to burnout and allows critical risks to slip through the cracks. The most significant advantage of AI cybersecurity tools is their ability to restore focus. By...

Cybersecurity AI: Hacking the AI Hackers Via Prompt Injection

We demonstrate how AI-powered cybersecurity tools can be turned against themselves through prompt injection attacks. Prompt injection is reminiscent of cross-site scripting XSS: malicious text is hidden within seemingly trusted content, and when the system processes it, that text is transformed...

Vendor-Agnostic Security: The Key To Smarter Risk Management

Security teams are investing in more tools than ever – but visibility into real risk is still elusive. Why? Because too many tools are locked inside closed ecosystems that don’t share data or context. A vendor-agnostic security strategy changes that. It gives you the flexibility to integrate...

Why top SOC teams are shifting to Network Detection and Response

Security Operations Center SOC teams are facing a fundamentally new challenge — traditional cybersecurity tools are failing to detect advanced adversaries who have become experts at evading endpoint-based defenses and signature-based detection systems. The reality of these “invisible intruders” i...

CISA: Roadmap to Innovation in the Dams Sector

The Roadmap to Innovation in the Dams Sector outlines Research and Development Focus Areas for the next 3-5 years to enhance the security and resilience of the sector and ensure that dams and related infrastructure can withstand current and emerging risks. The R+D Focus Areas identified in this...

Head Mare and Twelve join forces to attack Russian entities

Introduction In September 2024, a series of attacks targeted Russian companies, revealing indicators of compromise and tactics associated with two hacktivist groups: Head Mare and Twelve. Our investigation showed that Head Mare relied heavily on tools previously associated with Twelve...

Cybercrime gets a few punches on the nose

It’s not often that we get to share good news, so we wanted to grab this opportunity and showcase some progress made by law enforcement actions against cybercrime with you. Europol notified us about the take-down of two of the largest cybercrime forums in the world. With over 10 million users,...

Patch Tuesday, October 2024 Edition

Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple has addressed a bug in its new...

Iranian Hackers Tried to Give Hacked Trump Campaign Emails to Dems

Plus: The FBI dismantles the largest-ever China-backed botnet, the DOJ charges two men with a $243 million crypto theft, Apple’s MacOS Sequoia breaks cybersecurity tools, and more...

One More Tool Will Do It? Reflecting on the CrowdStrike Fallout

The proliferation of cybersecurity tools has created an illusion of security. Organizations often believe that by deploying a firewall, antivirus software, intrusion detection systems, identity threat detection and response, and other tools, they are adequately protected. However, this approach n...

Subscription Health Dashboard Update: Optimize Deployments and Identify Issues

For VM teams navigating the complex realm of cybersecurity tools, ensuring deployment health is paramount. Swift methods are required to pinpoint issues amidst complexity. Challenges such as duplicate entries, ghost hosts, and decommissioned devices can obstruct these views, hindering data...

Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024

Highlights Complex Tool Landscape: Explore the wide array of cybersecurity tools used by MSPs, highlighting the common challenge of managing multiple systems that may overlap in functionality but lack integration. Top Cybersecurity Challenges: Discuss the main challenges MSPs face, including...