security-labs-pocs

Datadog Security Labs 研究与概念验证代码 === 本仓库包含来自 Datadog Security Labs 的信息、漏洞利用、恶意软件样本和脚本。 目标 本仓库旨在提供概念验证漏洞利用、恶意软件样本和技术演示，以帮助社区应对威胁。本仓库中的代码可能用于： 改进检测 继续对战术、技术和程序 TTP 进行额外研究 发现更多漏洞利用 概念验证 Dirty Pipe 容器逃逸 JWT 空签名漏洞的利用与示例易受攻击应用 CVE-2022-21449 Spring Core RCE 又名 Spring4shell CVE-2022-22965 Confluence...

dirtypipe-container-breakout-poc

Escape de contenedor Dirty Pipe Movido a https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the cipher.KeyUnwrap function when decrypting a JSON Web Encryption JWE object with a key wrapping algorithm ending in 'KW', except for 'A128GCMKW', 'A192GCMKW', and 'A256GCMKW' and the encryptedkey field is empty...

Go JOSE Panics in JWE decryption

Impact Decrypting a JSON Web Encryption JWE object will panic if the alg field indicates a key wrapping algorithm one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW and the encryptedkey field is empty. The panic happens when cipher.KeyUnwrap in keywrap.go attempts to...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This repository is a collection of proof-of-concept PoC exploits from Datadog Security Labs. The exploits are designed to demonstrate vulnerabilities in various software products, including Confluence, OpenSSL, and Spring. The repository contains code and instructions for running the exploits, as...

Doppler announces integration with Datadog to streamline security and monitoring

San Francisco, United States / California, 30th January 2025, CyberNewsWire...

Threatest - Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...