21 matches found
jeopardize
介绍 Jeopardize 工具旨在以最低成本提供针对网络钓鱼域名的基础威胁情报与响应能力。它能检测已注册的网络钓鱼域名候选（如形近域名、同形异义字攻击等），对其进行分析并分配风险评分。之后，它会向这些钓鱼网站上的登录表单发送看起来合法的凭证。 为什么？ 设想这个场景：攻击者注册一个钓鱼域名 acmebnak.com（acmebank 的形近域名），复制原 acmebank.com 的登录表单到该域名，并通过赞助推文推广。这个广告和域名很可能在次日被标记为钓鱼，但攻击者已经窃取了用户的凭证。此时再将其下线已无助于受影响的用户。Jeopardize...
EvilURL
EvilURL v3.0 生成用于IDN同形字攻击的Unicode域名并检测它们。 EvilURL遵循BSD风格许可证发布。更多详情请参见 LICENSE。 克隆 root@kitploit: git clone https://github.com/UndeadSec/EvilURL.git 安装 root@kitploit: pip install python-nmap python-whois 运行 root@kitploit: cd EvilURL root@kitploit: python3 evilurl.py 视频...
class_struggle
Lucha de Clases Repositorio que acompaña al artículo "Class Struggle". El repositorio demuestra el uso de un autoencoder para detectar dominios similares a un subconjunto conocido de dominios de phishing publicados por CERT Polska. Fuentes de Datos Lista de Advertencia de CERT Polska Este proyect...
ALYCON-Threat-Landscape
ALYCON：高级威胁图景分析 使用信息论相空间分析的多域威胁检测 概述 ALYCON 相空间可视化，展示多域威胁检测与异常分类。 框架： 无训练、通用异常检测，使用香农熵（H）、费舍尔信息（F）和瓦瑟斯坦距离（W）将系统状态映射到几何上不同的区域。 可视化组件 威胁图景地图显示： 相空间坐标： H, F, W 检测轴 状态聚类： 正常与异常状态 多域分析： 跨域威胁检测能力 实时检测： 基于几何分离的警报 联系方式 Michael Castens 通过 GitHub issues 联系 主仓库： ALYCON 框架 许可证： 保留所有权利。许可事宜请联系作者。...
CVE-2026-29811
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...
EUVD-2026-77075
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...
CVE-2026-29811
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...
CVE-2026-29811
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...
PT-2026-90952
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...
DiffUMI: Training-Free Universal Model Inversion Via Unconditional Diffusion for Face Recognition
Face recognition technology presents serious privacy risks due to its reliance on sensitive and immutable biometric data. To address these concerns, such systems typically convert raw facial images into embeddings, which are traditionally viewed as privacy-preserving. However, model inversion...
Qualys Adds Threat Intelligence for Typosquatting and Defamatory Domains to External Attack Surface Management
Cybersecurity professionals can now use Qualys CyberSecurity Asset Management CSAM with External Attack Surface Management EASM to reduce cyber risks from credential harvesting, phishing, and malware downloads and diminish reputational harm. Bad actors have been registering look-alike, sound-alik...
SUSE-SU-2025:0434-1 Security update for python36
This update for python36 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705...
AI/LLM Bettybot Domain Detection
Binary data 701483.prm...
The vulnerability of the Zscaler Internet Access (ZIA) domain detection module allows a hacker to execute a “man-in-the-middle” attack.
The vulnerability of the Zscaler Internet Access ZIA domain detection module is related to errors in the certificate validation process. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...
Wiz introduces Dangling Domain Detection to help you prevent subdomain takeovers
Easily detect dangling domains to reduce the risk of phishing campaigns and cookie harvesting of organization’s customers...
New SDR feature released for Cisco Secure Email
Cisco Talos today announced the release of a new mechanism that allows Cisco Secure Email customers the option to submit Sender Domain Reputation SDR disputes through TalosIntelligence.com. Customers now have the option of receiving self-service support through TalosIntelligence.com or may contin...
Web-Attack-Cheat-Sheet
It is an offensive tool for web application security testing. The repository contains a comprehensive web attack cheat sheet, covering various techniques for discovering, enumerating, scanning, and monitoring web applications. The tool covers topics such as IP and subdomain enumeration, cache and...
Disucz X3. 2 multiple reflected XSS vulnerability, a function of the defect leads to the-vulnerability warning-the black bar safety net
A function defect caused by XSS. Detailed description: member. php? mod=logging&action=login&referer=javascript://www. discuz. net/ code area welcome back, Newbie xx, it will now be transferred to the login pagesetTimeout"window. location. href ='javascript://www. discuz. net/';", 2 0 0...