hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

hardcidr

hardCIDR 背景 ペネトレーションテストの情報収集フェーズにおいて、標的組織が所有するネットブロック（CIDR表記のレンジ）を発見するためのLinux Bashスクリプトです。この情報は、5つの地域インターネットレジストリ（RIR）によって管理されています。 ARIN （北米） RIPE （欧州・アジア・中東） APNIC （アジア太平洋） LACNIC （ラテンアメリカ） AfriNIC （アフリカ）...

bluing

Bluing Bluetoothハッキングのためのインテリジェンス収集ツール 英語 · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing（旧称bluescan）は、主にPythonで書かれたBlu etooth In telligence G atheringツールです。複雑なプロトコルであるBluetoothの内部構造を覗き見たり、Bluetoothデバイスをハッキングするのに役立ちます。以下が主な機能です： インストール...

KaliIntelligenceSuite

Kali Intelligence Suite Kali Intelligence Suite KIS は、ペネトレーションテスター向けのインテリジェンス収集およびデータマイニングツールです。以下の機能を自動的に実行することで、迅速、自律的、集中的、かつ包括的なインテリジェンス収集を支援します： Kali Linux ツールの実行（例：dnsrecon、gobuster、hydra、nmap など） 公開 API のクエリ（例：Censys.io、Haveibeenpwned.com、Hunter.io、Securitytrails.com、Shodan.io など）...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

ODIN

ODIN ネットワークの観察、検出、調査 現在のバージョン: v2.0.0 "Huginn" ODINは、インテリジェンス収集、資産発見、およびレポート作成を自動化するPythonツールです。最新の開発状況についてはdevブランチを確認してください。フィードバックをお待ちしています。 詳細やインストールとセットアップの手順については、GitHub Wikiを参照してください。 ODINでできること...

Sandbox_Scryer

Sandbox Scryer（サンドボックス・スクライアー） バージョン： 1.0.4 ライセンス： GPL v3 Sandbox Scryerは、公開サンドボックスによる検知結果から、脅威ハンティングやインテリジェンスデータを生成するためのオープンソースツールです。 このツールはMITRE ATT&CKフレームワークを活用して結果を整理・優先順位付けし、IOCの収集、攻撃の動きの理解、脅威ハンティングを支援します。 研究者が数千のサンプルをサンドボックスに送信して、ATT&CKテクニックとともに使用できるプロファイルを構築できるようにすることで、Sandbox Scryerは...

recon

プロジェクトはmonorepoに移行しました。詳細は https://github.com/pownjs/pown をご覧ください。 Recon Reconは、知識グラフを搭載したターゲット偵察フレームワークです。フラットなテーブル表現の代わりに知識グラフを使用することで、異なる種類の情報間の関係を見つけやすくなり、多くの状況で非常に便利です。知識グラフのアルゴリズムは、差分検出、検索、最短経路の発見、その他多くの有益なタスクにも役立ち、情報発見とインテリジェンス収集を支援します。 Credits このツールは、secapps.com のオープンソースイニシアチブの一部です。 / |/|...

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence AI offline on its own servers, connecting document-search tools to files in its possession, and collecting the software part...

aetherion

/\ | | | | | |...

Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months

Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity. Symantec and Carbon Black...

Kazuar: Anatomy of a nation-state botnet

In this article 1. Delivery 2. Module types 3. Botnet operations 4. Who is Secret Blizzard? 5. Mitigation and protection guidance 6. Microsoft Defender detections Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for...

osTicket 1.18.3 Intelligence and Security Analysis Module

This Metasploit auxiliary module is designed for intelligence gathering, security analysis, and vulnerability discovery in osTicket installations. It performs passive and active reconnaissance without direct exploitation and stores results in the Metasploit database for reporting...

PDFs: Portable documents, or perfect deliveries for phish?

Cisco recently developed and released an update to its brand impersonation detection engine for emails. This new update enhances detection coverage and includes a wider range of brands that are delivered using PDF payloads or attachments. A significant portion of email threats with PDF payloads...

GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool

The threat actor behind the GIFTEDCROOK malware has made significant updates to turn the malicious program from a basic browser data stealer to a potent intelligence-gathering tool. "Recent campaigns in June 2025 demonstrate GIFTEDCROOK's enhanced ability to exfiltrate a broad range of sensitive...

Researchers Detail Bitter APT's Evolving Tactics as Its Geographic Scope Expands

The threat actor known as Bitter has been assessed to be a state-backed hacking group that's tasked with gathering intelligence that aligns with the interests of the Indian government. That's according to new findings jointly published by Proofpoint and Threatray in an exhaustive two-part analysi...

Penetration Testing for System Security: Methods and Practical Approaches

Penetration testing refers to the process of simulating hacker attacks to evaluate the security of information systems . This study aims not only to clarify the theoretical foundations of penetration testing but also to explain and demonstrate the complete testing process, including how network...

DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection

The Threat actor known as DoNot Team has been linked to a new Android malware as part of highly targeted cyber attacks. The artifacts in question, named Tanzeem meaning "organization" in Urdu and Tanzeem Update, were spotted in October and December 2024 by cybersecurity company Cyfirma. The apps ...

Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese Hackers

A suspected Chinese threat actor targeted a large U.S. organization earlier this year as part of a four-month-long intrusion. According to Broadcom-owned Symantec, the first evidence of the malicious activity was detected on April 11, 2024 and continued until August. However, the company doesn't...

Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

Government agencies and non-governmental organizations in the United States have become the target of a nascent China state threat actor known as Storm-2077. The adversary, believed to be active since at least January 2024, has also conducted cyber attacks against the Defense Industrial Base DIB,...