jeopardize

介绍 Jeopardize 工具旨在以最低成本提供针对网络钓鱼域名的基础威胁情报与响应能力。它能检测已注册的网络钓鱼域名候选（如形近域名、同形异义字攻击等），对其进行分析并分配风险评分。之后，它会向这些钓鱼网站上的登录表单发送看起来合法的凭证。 为什么？ 设想这个场景：攻击者注册一个钓鱼域名 acmebnak.com（acmebank 的形近域名），复制原 acmebank.com 的登录表单到该域名，并通过赞助推文推广。这个广告和域名很可能在次日被标记为钓鱼，但攻击者已经窃取了用户的凭证。此时再将其下线已无助于受影响的用户。Jeopardize...

EvilURL

EvilURL v3.0 生成用于IDN同形字攻击的Unicode域名并检测它们。 EvilURL遵循BSD风格许可证发布。更多详情请参见 LICENSE。 克隆 root@kitploit: git clone https://github.com/UndeadSec/EvilURL.git 安装 root@kitploit: pip install python-nmap python-whois 运行 root@kitploit: cd EvilURL root@kitploit: python3 evilurl.py 视频...

class_struggle

类斗争 与"类斗争" 文章配套的仓库。 该仓库演示了如何使用自编码器检测与 CERT Polska 发布的已知（子集）钓鱼域名相似的域名。 数据来源 CERT Polska 警告列表 本项目使用 CERT Polska 警告列表 https://cert.pl/en/warning-list/ 的数据， 由 CERT Polska NASK 维护。 这些数据仅用于研究和教育目的 。 域名的原始列表未在本仓库中重新分发。 Majestic Million 本项目使用由 Majestic 维护的 Majestic Million 数据集。 该数据集根据 Creative Commons...

ALYCON-Threat-Landscape

ALYCON：高级威胁图景分析 使用信息论相空间分析的多域威胁检测 概述 ALYCON 相空间可视化，展示多域威胁检测与异常分类。 框架： 无训练、通用异常检测，使用香农熵（H）、费舍尔信息（F）和瓦瑟斯坦距离（W）将系统状态映射到几何上不同的区域。 可视化组件 威胁图景地图显示： 相空间坐标： H, F, W 检测轴 状态聚类： 正常与异常状态 多域分析： 跨域威胁检测能力 实时检测： 基于几何分离的警报 联系方式 Michael Castens 通过 GitHub issues 联系 主仓库： ALYCON 框架 许可证： 保留所有权利。许可事宜请联系作者。...

DiffUMI: Training-Free Universal Model Inversion Via Unconditional Diffusion for Face Recognition

Face recognition technology presents serious privacy risks due to its reliance on sensitive and immutable biometric data. To address these concerns, such systems typically convert raw facial images into embeddings, which are traditionally viewed as privacy-preserving. However, model inversion...

Qualys Adds Threat Intelligence for Typosquatting and Defamatory Domains to External Attack Surface Management

Cybersecurity professionals can now use Qualys CyberSecurity Asset Management CSAM with External Attack Surface Management EASM to reduce cyber risks from credential harvesting, phishing, and malware downloads and diminish reputational harm. Bad actors have been registering look-alike, sound-alik...

SUSE-SU-2025:0434-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705...

AI/LLM Bettybot Domain Detection

Binary data 701483.prm...

The vulnerability of the Zscaler Internet Access (ZIA) domain detection module allows a hacker to execute a “man-in-the-middle” attack.

The vulnerability of the Zscaler Internet Access ZIA domain detection module is related to errors in the certificate validation process. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

Wiz introduces Dangling Domain Detection to help you prevent subdomain takeovers

Easily detect dangling domains to reduce the risk of phishing campaigns and cookie harvesting of organization’s customers...

New SDR feature released for Cisco Secure Email

Cisco Talos today announced the release of a new mechanism that allows Cisco Secure Email customers the option to submit Sender Domain Reputation SDR disputes through TalosIntelligence.com. Customers now have the option of receiving self-service support through TalosIntelligence.com or may contin...

Web-Attack-Cheat-Sheet

It is an offensive tool for web application security testing. The repository contains a comprehensive web attack cheat sheet, covering various techniques for discovering, enumerating, scanning, and monitoring web applications. The tool covers topics such as IP and subdomain enumeration, cache and...

Disucz X3. 2 multiple reflected XSS vulnerability, a function of the defect leads to the-vulnerability warning-the black bar safety net

A function defect caused by XSS. Detailed description: member. php? mod=logging&action=login&referer=javascript://www. discuz. net/ code area welcome back, Newbie xx, it will now be transferred to the login pagesetTimeout"window. location. href ='javascript://www. discuz. net/';", 2 0 0...

NetBIOS Domain Detection

Binary data 7030.pasl...

NETBIOS Domain/workgroup Detection

Binary data 5533.prm...

xKungfoo on the net horse obscene skill-vulnerability warning-the black bar safety net

Author: cosine Today xKungfoo on the last day, G in the above a hung it to a chain of issues. Some hung it to the obscene tricks did not say in detail, where disclosed. In fact, some nothing, is the skill, some people also played. The first one, clipboard hijacking hung it to the This is actually...