singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

antipwny

antipwny Authors: Rohan Vazarkar, David Bitner A host based IDS/IPS written in C, targeted at Metasploit Payloads. Instructions AntiPwny requires .NET Framework 4.5, which can be acquired here. An offline installer is available here http://www.microsoft.com/en-us/download/details.aspx?id=40779...

CyberDefense-Lab

Cyber Security Lab: Blue Team Infrastructure & Network Defense This laboratory project demonstrates the creation of an integrated "Blue Team" infrastructure, focusing on centralized network security, Intrusion Detection/Prevention Systems IDS/IPS, and Security Information and Event Management SIE...

pig

Pig Pig que l'on peut comprendre comme Packet intruder generator est un outil de création de paquets pour Linux. Vous pouvez utiliser Pig pour tester votre IDS/IPS entre autres choses. Pig apporte un ensemble de signatures d'attaques bien connues prêtes à l'emploi et vous pouvez étendre cette...

-CVE-2024-6095

Key Enhancements: 1. Random String Obfuscation : Introduced random string generation to obfuscate paths, making detection harder. 2. Advanced Payloads : Added more sophisticated payloads with different obfuscation techniques to evade security mechanisms. 3. Custom Headers : Included custom header...

From Network Intrusion Detection to Blockchain-Backed Endpoint Detection and Response: Mapping the Landscape of Decentralized Detection-And-Response Architectures

While the literature on blockchain-assisted intrusion detection and prevention systems IDS/IPS for Internet of Things IoT and Industrial Internet of Things IIoT networks is mature, existing systematic reviews suffer from two critical limitations: they overlook the structural shift toward modern...

CVE-2026-46387

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...

UBUNTU-CVE-2026-45747

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...

crowdsec v1.8.0-rc2

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

crowdsec v1.8.0-rc1

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

Suricata: undisclosed vulnerability (ZAI-2026-TMHLNK)

Not disclosed. Details are not yet publicly disclosed...

EUVD-2005-2696

Malware in sbrugna...

CVE-2024-55627: Integer Underflow (Wrap or Wraparound)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer...

CVE-2024-55605: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...

What Are Normal Users Supposed to Do with IDS Alerts from Network Gear?

Probably once a week, I see posts like this in the r/Ubiquiti subreddit. Ubiquiti makes network gear that includes an "IDS/IPS" feature. I own some older Ubiquiti gear so I am familiar with the product. When you enable this feature, you get alerts like this one, posted by a Redditor: This is...

A refresher on Talos’ open-source tools and the importance of the open-source community

Open-source software that is free to download, deploy and modify is a vital component in the fight for cyber security. Freely available software not only helps defend systems that would otherwise be unprotected, but it also allows people to learn and develop vital cybersecurity skills. In this...

A10: Insufficient logging and monitoring ❗️ — Top 10 OWASP 2017

A10: Insufficient logging and monitoring ❗️ — Top 10 OWASP 2017 Introduction Insufficient logging and monitoring is in the Top 10 OWASP for many different reasons. Not only is it hard to detect but it’s also hard to protect from. There are several ways we can protect ourselves from this...

SANS 2021 Threat Hunting Survey: How Organizations' Security Postures Have Evolved in the New Normal

It's that time of year once again: The SANS Institute — the most trusted resource for cybersecurity research — has conducted its sixth annual Threat Hunting Survey, sponsored by Rapid7. The goal of this survey is to better understand the current threat hunting landscape and the benefits provided ...

Suricata Based IDS/IPS Distro: SELKS

SELKS is both Live and installable Network Security Management ISO based on Debian implementing and focusing on a complete and ready to use Suricata IDS/IPS ecosystem with its own graphic rule manager. From start to analysis of IDS/IPS and NSM events in 30 sec. The name comes from its major...

Non-reliable Nessus scan results

Do you perform massive unauthenticated vulnerability scans with Nessus? It might be a bad idea. It seems that Nessus is not reliable enough to assess hundreds and thousands of hosts in one scan and can lose some valuable information. The thing is that sometimes Nessus does not detect open ports a...