h0neytr4p

T-Pot에 맞게 조정됨 h0neytr4p의 이 포크는 T-Pot을 위해 다음과 같은 기능으로 수정되었습니다: Docker 지원 추가 Dockerfile, docker-compose.yml 두 개 대신 단일 로그 파일 사용 CSV 대신 JSON으로 로깅 JSON 로그 파일에 추가 정보 포함 예: 쿠키, 헤더, 대상 포트 등 여러/다른 포트에서의 트랩 지원 개선 미리 정의된 크기 제한과 함께 페이로드 핸들러 추가 페이로드를 payload 폴더에 저장 원본 h0neytr4p 작업자 저자: @pbssubhash; Twitter |...

Oracle Linux 10 : tomcat9 (ELSA-2026-25341)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25341 advisory. - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometime...

laurel v0.8.1

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

SUSE SLES15 Security Update : tomcat (SUSE-SU-2026:1604-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1604-1 advisory. Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open...

adaptivewaf

Adaptive Web Application Firewall WAF - v1 Rule-Based A hob...

CVE-2023-46672

CVE-2023-46672 affects Elastic Logstash. Under specific conditions, sensitive data can be recorded in Logstash logs: Logstash must be configured to log in JSON format (not the default) and a variable in the Logstash configuration must reference data stored in the Logstash keystore. Affected versi...

Logstash 8.11.1 Security Update (ESA-2023-26)

Logstash Insertion of Sensitive Information into Log File ESA-2023-26 An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...

suricata:fuzz_sigpcap_aware: Null-dereference READ in AlertJson

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5182217597091840 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

Node.js third-party modules: bunyan - RCE via insecure command formatting

I would like to report RCE in bunyan It allows arbitrary commands remotely inside the victim's PC Module module name: bunyan version: 1.8.12 npm page: https://www.npmjs.com/package/bunyan Module Description Bunyan is a simple and fast JSON logging library for node.js services: Module Stats 920,19...

Cowrie - SSH/Telnet Honeypot

Cowrie is a medium interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker. Cowrie is developed by Michel Oosterhof. Features Some interesting features: Fake filesystem with the ability to add/remove files. A full fake filesystem...

Cowrie SSH Honeypot

Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen. Features Some interesting features: Fake filesystem with the ability to add/remove file...

Cowrie - SSH Honeypot

Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen desaster. Features Some interesting features: Fake filesystem with the ability to...