ppid-spoofing

https://www.countercept.com/blog/detecting-parent-pid-spoofing/...

awesome-threat-detection

Awesome Threat Detection and Hunting A curated list of awesome threat detection and hunting resources Contents Threat Detection and Hunting 🔨 Tools Detection, Alerting and Automation Platforms Endpoint Monitoring Network Monitoring Email Monitoring 🔍 Detection Rules 📑 Dataset 📘 Resources Framewor...

detections

detections This is a repository for information that might be useful to detection maliciousness in your environment. This is not exhaustive and please use it at your own risk validate your findings!...

cve-2014-0160-Yunfeng-Jiang

cve-2014-0160-Yunfeng-Jiang 1. The reading course report ReadingCourseReport.pdf 2. Detect tools 1. heartbleed.py https://gist.github.com/eelsivart/10174134 Usage: python heartbleed.py hostname 2. ssltest.py https://github.com/Lekensteyn/pacemaker/blob/master/ssltest.py Usage: python ssltest.py...

SupplyChainAttacks

Firmware Supply Chain Attacks This repository provides a curated and comprehensive collection of documented firmware supply chain attacks discovered or investigated by Binarly REsearch team. Maintained by Binarly, the project serves as an educational and reference resource for cybersecurity...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

Detect-CVE-2017-15361-TPM

Detect Trusted Platform Modules Vulnerable to CVE-2017-15361 This repository provides content for aiding DoD administrators in detecting systems that have an enabled Trusted Platform Module TPM that is vulnerable to CVE-2017-15361 and is a companion to Information Assurance Advisory RSA Key...

lab_cve-2021-4034-polkit-emulation-and-detection

This repository does not have a README...

Linux---Security---Detect-and-Mitigate-CVE-2024-3094

Linux- Security- Detect and Mitigate CVE-2024-3094 It was determined that malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. It was determined that only certain operating systems and operating system versions were affected by this vulnerability. This repo...

ict279-cve-2025-54793

ict279-cve-2025-54793 Group project — CVE-2025-54793 detection & mitigation Bhuvanesh, Shiva, Emma...

When Your $2M Security Detection Fails: Can your SOC Save You?

Enterprises today are expected to have at least 6-8 detection tools, as detection is considered a standard investment and the first line of defense. Yet security leaders struggle to justify dedicating resources further down the alert lifecycle to their superiors. As a result, most organizations'...

PT-2025-41846

Name of the Vulnerable Software and Affected Versions YouDataSum CPAS Audit Management System versions prior to 4.9 Description The YouDataSum CPAS Audit Management System is susceptible to SQL Injection due to inadequate input validation. This allows remote, unauthenticated attackers to execute...

An Empirical Study of Vulnerabilities in Python Packages and Their Detection

In the rapidly evolving software development landscape, Python stands out for its simplicity, versatility, and extensive ecosystem. Python packages, as units of organization, reusability, and distribution, have become a pressing concern, highlighted by the considerable number of vulnerability...

Exploit for Command Injection in Microsoft

CVE-2025-32711 EchoLeak Detection Tool 🔐 !PowerShellhtt...

Explain First, Trust Later: LLM-Augmented Explanations for Graph-Based Crypto Anomaly Detection

The decentralized finance DeFi community has grown rapidly in recent years, pushed forward by cryptocurrency enthusiasts interested in the vast untapped potential of new markets. The surge in popularity of cryptocurrency has ushered in a new era of financial crime. Unfortunately, the novelty of t...

Exploit for Improper Input Validation in Microsoft

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link C...

New Report: Child Sexual Abuse Content and Online Risks to Children on the Rise

Certain online risks to children are on the rise, according to a recent report from Thorn, a technology nonprofit whose mission is to build technology to defend children from sexual abuse. Research shared in the Emerging Online Trends in Child Sexual Abuse 2023 report, indicates that minors are...

Weak Security Controls and Practices Routinely Exploited for Initial Access

The cybersecurity authorities of the United States, Canada, New Zealand, the Netherlands, and the United Kingdom have issued a joint Cybersecurity Advisory CSA on 10 routinely exploited weak security controls, poor configurations, and bad practices that allow malicious actors to compromise...

Which Hole to Plug First? Solving Chronic Vulnerability Patching Overload

According to folklore, witches were able to sail in a sieve, a strainer with holes in the bottom. Unfortunately, witches don't work in cybersecurity – where networks generally have so many vulnerabilities that they resemble sieves. For most of us, keeping the sieve of our networks afloat requires...

Exploit for Use After Free in Microsoft

微软3389远程漏洞CVE-2019-0708批量检测工具 0x001 Win下检测 https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 DIR . 2019/06/02 02:11 DIR .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02 01:57 619,520 libssl-11.dll 2019/06/02 02:04 172,03...