ad-honeypot-autodeploy

ad-honeypot-autodeploy 소형의 의도적으로 안전하지 않은 취약한 Windows 도메인을 RDP 허니팟용으로 완전 자동으로 배포합니다. 자체 호스팅 가상화 환경에서 libvirt와 QEMU/KVM을 사용하여 실행됩니다 하지만 클라우드 기반 솔루션에 맞게 쉽게 사용자 지정할 수 있습니다. RDP 허니팟 테스트를 목적으로 작은 Windows 도메인을 처음부터 사용자 개입 없이 자동으로 쉽게 설정하는 데 사용됩니다. 도메인 컨트롤러, 데스크톱 컴퓨터 및 악의적인 행위자의 행동을 로깅하기 위해 구성된 Graylog 서버...

USN-5399-1: libvirt vulnerabilities

It was discovered that libvirt incorrectly handled certain locking operations. A local attacker could possibly use this issue to cause libvirt to stop accepting connections, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2021-3667 It was discovered that libvirt...

USN-3985-2: libvirt update

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered...

USN-2867-1: libvirt vulnerabilities

It was discovered that libvirt incorrectly handled the firewall rules on bridge networks when the daemon was restarted. This could result in an unintended firewall configuration. This issue only applied to Ubuntu 12.04 LTS. CVE-2011-4600 Peter Krempa discovered that libvirt incorrectly handled...

USN-2366-1: libvirt vulnerabilities

Daniel P. Berrange and Richard Jones discovered that libvirt incorrectly handled XML documents containing XML external entity declarations. An attacker could use this issue to cause libvirtd to crash, resulting in a denial of service on all affected releases, or possibly read arbitrary files if...

USN-2209-1: libvirt vulnerabilities

It was discovered that libvirt incorrectly handled symlinks when using the LXC driver. An attacker could possibly use this issue to delete host devices, create arbitrary nodes, and shutdown or power off the host. CVE-2013-6456 Marian Krcmarik discovered that libvirt incorrectly handled seamless...