antipwny

antipwny Authors: Rohan Vazarkar, David Bitner A host based IDS/IPS written in C, targeted at Metasploit Payloads. Instructions AntiPwny requires .NET Framework 4.5, which can be acquired here. An offline installer is available here http://www.microsoft.com/en-us/download/details.aspx?id=40779...

ossec-hids

OSSEC v4.3.0 OSSECについて OSSECは、システムの監視と制御を行うための完全なプラットフォームです。HIDS（ホスト型侵入検知）、ログ監視、SIM/SIEMのすべての側面を、シンプルで強力かつオープンソースなソリューションに統合しています。 最新情報については、当社のウェブサイトをご覧ください。www.ossec.net 現在のリリース 現在の安定版リリースは、ossecのウェブサイトで入手できます。 リリースのダウンロード: Downloads リリースドキュメント: docs 開発 開発版はGitHubでホストされており、簡単なgit cloneで入手できます。...

ossec-hids

OSSEC v4.3.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...

NovaHypervisor

NovaHypervisor Description NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks either via Bring Your Own Vulnerable Driver BYOVD or other means by safeguarding defense products AntiVirus / Endpoint Protection and kerne...

spyre

Spyre ...シンプルで自己完結型のモジュール式ホストベースIOCスキャナ Spyre は、YARA パターンマッチングエンジンとその他のスキャンモジュールを中心に構築されたシンプルなホストベースIOCスキャナです。このプロジェクトの主な目標は、YARAルールやその他の侵害指標を容易に運用可能にすることです。 ユーザーは独自のルールセットを用意する必要があります。awesome-yara リポジトリでは、利用可能な無料のYARAルールセットの概要が提供されています。 Spyre...

velociraptor

Velociraptor - Endpoint visibility and collection tool. Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language VQL queries. To learn more about Velociraptor, read the documentation on: https://docs.velociraptor.app/ Quick start If you want to see...

vulners-scanner

vulners-scanner 説明 ホストベースの脆弱性スキャナーのPoCです。vulners.com APIを使用します。オペレーティングシステムを検出し、インストール済みパッケージを収集し、その中の脆弱性をチェックします。 サポートOS 現在、以下のオペレーティングシステムのパッケージ収集をサポートしています： Debian系（debian、kali、ubuntu） Rhel系（redhat、centos、fedora） Pythonバージョン...

EagleEye

EagleEye - 基于主机的入侵检测与网络监控系统 该项目目前仍需大量工作才能投入使用，因为这是我的毕业设计，所以并非用户友好型，仅限有经验的用户使用，目前为测试版。我将它发布/制作出来仅用于教育目的！ EagleEye 由两部分组成： 客户端（Client） 用 Go 语言编写 用途: 捕获设备上的每个数据包，提取常见协议中的重要细节，最后将所有收集到的数据发送到主控端（如果主控端在线）。 使用: 应安装在你想要监控的每个设备上（例如：公司员工的设备）。 主控端（Master） : 用 Python 和 Bootstrap 编写 用途: 接收客户端发送的每个数据包，在 GUI...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

vulners-scanner

vulners-scanner Description PoC of a host-based vulnerability scanner, which uses vulners.com API. Detects operating system, collects installed packages and checks vulnerabilities in it. Supported OS Currently support collecting packages for these operating systems: Debian-based debian, kali,...

CVE-2025-55182

CVE-2025-55182 Reglas de detección basadas en el host para la vulnerabilidad RCE en el framework React JavaScript...

fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...

EUVD-2026-52445

Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers set CURLOPTURL to the URI exactly as written and push that Host into CURLOPTHTTPHEADER; StreamHandler does the same throu...

OSSEC HIDS 4.2.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

OSSEC HIDS 4.1.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

HIDBench: Benchmarking Large Language Models for Host-Based Intrusion Detection

Recent benchmark efforts have advanced the evaluation of large language models LLMs in cybersecurity, including tasks such as penetration testing and vulnerability identification. However, a critical cybersecurity task, namely intrusion detection from system logs, remains unexplored. In this work...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-016492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016492 advisory. OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted ...

util-linux: util-linux: Access control bypass due to improper hostname canonicalization

A flaw was found in util-linux. Improper hostname canonicalization in the login1 utility, when invoked with the -h option, can modify the supplied remote hostname before setting PAMRHOST. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing...

EUVD-2026-18817

A flaw was found in util-linux. Improper hostname canonicalization in the login1 utility, when invoked with the -h option, can modify the supplied remote hostname before setting PAMRHOST. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing...

CVE-2026-3184

A flaw was found in util-linux. Improper hostname canonicalization in the login1 utility, when invoked with the -h option, can modify the supplied remote hostname before setting PAMRHOST. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing...