sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

mquery

mquery: マルウェアアナリスト向けの超高速Yaraクエリ マルウェアサンプルの検索に困ったことはありませんか？ Mqueryは、デジタル倉庫を閲覧するためのアナリストフレンドリーなWeb GUIです。 これを利用すれば、テラバイト単位のマルウェアを瞬時に検索できます。 内部では、当社の UrsaDB を使用して、ngramによるyaraクエリを高速化しています。 デモ パブリックインスタンスは近日公開予定です。お楽しみに... クイックスタート 1. インストールと起動 最も簡単な方法は docker compose を使用することです。 git clone...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

subparse

subparse Subparse는 Josh Strochein, Aaron Baker, Odin Bernstein이 개발한 모듈형 프레임워크입니다. 이 프레임워크는 악성코드 파일을 파싱하고 인덱싱하며, 파싱 과정에서 발견된 정보를 검색 가능한 웹 뷰어로 제공하도록 설계되었습니다. 프레임워크는 모듈형으로, 핵심 파싱 엔진, 파싱 모듈, 그리고 악성코드 인덱스에 추가 정보를 제공하는 다양한 강화 모듈enricher로 구성됩니다. 프레임워크의 주요 입력 값은 악성코드 파일의 디렉터리이며, 핵심 파싱 엔진 또는 사용자가 지정한 파싱 엔...

cve-2020-0618

CVE-2020-0618 ハニーポット CVE-2020-0618 SQL Reporting Services RCE の悪用試行を検出して記録します SSRS と同様のコンテンツとヘッダーを提供し、検索エンジン（Google、Shodan など）でのインデックス登録の可能性を高めます 以下の素晴らしい研究に基づいています: MDSec および x1sec インストール コードを入手 Go 環境が準備されていることを確認してください。 git clone https://github.com/wortell/cve-2020-0618 証明書の生成 自己署名証明書を生成: opens...

RastLeak

RastLeak GoogleやBingなどの検索エンジンを使用したハッキング手法により、情報漏洩を自動的に検出するツール。 インストール方法 git clone https://github.com/n4xh4ck5/RastLeak.git pipで依存関係をインストール: pip install -r requirements.txt wgetをインストールするには: sudo pip install wget バージョン 最新の安定版は2.2です。 使用方法 python rastleak.py -h usage: rastleak.py -h -d DOMAIN -v...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

ache

ACHE フォーカスクローラー ACHE はフォーカス型 Web クローラーです。特定の基準（例：特定のドメインに属するページ、ユーザー指定のパターンを含むページ）を満たす Web ページを収集します。 ACHE は、特定のドメイン内で関連ページと非関連ページを区別するために ページ分類器 を使用する点で、汎用クローラーとは異なります。ページ分類器は、単純な正規表現（例えば特定の単語を含むすべてのページに一致するもの）から、機械学習ベースの分類モデルまで様々です。 ACHE...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 目录索引漏洞 描述 TOTOLINK-A702R-V1.0.0-B20161227.1023 登录门户中的目录索引漏洞允许攻击者通过GET参数访问/icons/目录。 附加信息 修复措施：禁用Web服务器的目录列表。 漏洞类型 目录索引 产品供应商 TOTOLINK 受影响产品代码库 TOTOLINK-A702R-V1.0.0-B20161227.1023 - 型号 A702R（固件 V1.0.0） 受影响组件 TOTOLINK-A702R-V1.0.0-B20161227.1023...

CLEANSTART-2026-OX24018 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened

Security vulnerability affects the cri-tools package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1771858411)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771858411 advisory. - archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead...

Rocky Linux 9 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_4178)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234178 advisory. OpenJDK: improper handling of slash characters in URI-to-path conversion 8305312 CVE-2023-22049 OpenJDK: array indexing integer overflow issue 8304468...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_4776)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20224776 advisory. Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution CVE-2022-1529 Mozilla: Prototype pollution in Top-Level Await...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1771858411)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771858411 advisory. - archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead t...

CVE-2026-47533

A flaw was found in nvidia-driver. A local attacker with administrative privileges can trigger an array indexing error within the kernel-mode driver layer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, access sensitive data, or cause a...

CVE-2026-102822

A flaw was found in russh. This vulnerability allows a remote attacker to cause a Denial of Service DoS by terminating active connection tasks. When a connection is configured to permit sessions without a Message Authentication Code MAC, improper algorithm negotiation allows pairing with block...

CVE-2026-101091 SiYuan before v3.8.4 SQL Injection via Block Query Embed

SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with non-read-only SQL statements that execute automatically during background indexing, rendering, or export operations witho...

CVE-2026-101091 SiYuan before v3.8.4 SQL Injection via Block Query Embed

SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with non-read-only SQL statements that execute automatically during background indexing, rendering, or export operations witho...

CVE-2026-101091

SiYuan versions before v3.8.4 are vulnerable to a SQL injection flaw because they fail to properly validate SQL statements in block query embed blocks executed against siyuan.db . An attacker can craft malicious .sy documents containing non-read-only SQL statements. These statements execute autom...