fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: 여러 인증 오류를 유발하는 호스트 차단 Fail2Ban은 /var/log/auth.log와 같은 로그 파일을 스캔하여 너무 많은 실패한 로그인 시도를 수행하는 IP 주소를 차단합니다. 이는 시스템 방화벽 규칙을 업데이트하여 해당 IP 주소의 새 연결을 설정 가능한 시간 동안 거부함으로써 이루어집니다. Fail2Ban은 sshd 및 Apache와 같은 많은...

CertEagle

CertEagle - 실시간 CT 로그 피드를 사용하는 자산 모니터링 유틸리티 자세한 설명은 여기에서 확인할 수 있습니다: 블로그 읽기: https://medium.com/@Asm0d3us/weaponizing-live-ct-logs-for-automated-monitoring-of-assets-39c6973177c7 소개 버그바운티에서 "1등이 아니면 꼴찌 "라는 말이 있습니다. 은메달이나 동메달은 없습니다. 리콘은 매우 중요한 역할을 하며, 다른 사람보다 먼저 새로 추가된 자산을 탐지/식별할 수 있다면 해당 자산에서 보안...

SIEM Dashboard

🛡️ SIEMダッシュボード - Streamlit PythonとStreamlitを使用して構築された、リアルタイムで軽量なセキュリティ情報およびイベント管理（SIEM）ダッシュボード。 システム使用状況を可視化し、クライアントログを監視し、auth.log、kernel.log などのログからUSBベースの脅威や侵入試行を検出します。 📊 機能 リアルタイムのシステム監視（CPU、RAM、ディスク） カーネルログからのUSBデバイス検出 定義済みの攻撃パターンを使用した侵入検出 /var/log/remotelogs/ からのマルチホストログ監視...

ossec-hids

OSSEC 정보 OSSEC는 시스템을 모니터링하고 제어하기 위한 완전한 플랫폼입니다. HIDS호스트 기반 침입 탐지, 로그 모니터링, SIM/SIEM의 모든 측면을 단순하고 강력하며 오픈 소스인 하나의 솔루션으로 결합합니다. 최신 정보는 저희 웹사이트를 방문하세요. www.ossec.net 현재 릴리스 현재 안정 버전은 ossec 웹사이트에서 확인할 수 있습니다. 릴리스 다운로드: Downloads 릴리스 문서: docs 개발 개발 버전은 GitHub에서 호스팅되며 간단한 git clone만으로 받을 수 있습니다. 스크린샷 파...

ossec-hids

OSSEC v4.3.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...

RDP-Guard

RDP Guard RDP Guard は、Windows セキュリティログ内の失敗した RDP サインイン試行を監視し、悪質なリモート IP アドレスを Windows ファイアウォールを介してブロックします。 デフォルト設定 イベント ID: 4625 ログオンタイプ: 3 または 10 しきい値: 3 回以上の監査失敗 チェック間隔: 15 分 ファイアウォールルール名: RDPGUARDyyyyMMddHHmmssfff チェックでブロック対象の IP が見つかった場合、それらはすべてルールの remoteip スコープを使用して単一の受信ファイアウォールルールに書き込まれます。...

OSSEC HIDS 4.2.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

OSSEC HIDS 4.1.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

Exploit for Double Free in Apache Http_Server

Watch for the double-free in real-ti...

PT-2026-6047

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor Cloud versions prior to 2026-02-03 Description Foxit PDF Editor Cloud pdfonline contains a stored cross-site scripting issue in the file upload feature. A malicious username is embedded into the upload file list without proper...

OSSEC HIDS 4.0.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

Logwatch 7.14

Logwatch analyzes and reports on unix system logs. It is a customizable and pluggable log monitoring system which will go through the logs for a given period of time and make a customizable report. It should work right out of the package on most systems...

AgenticCyber: A GenAI-Powered Multi-Agent System for Multimodal Threat Detection and Adaptive Response in Cybersecurity

The increasing complexity of cyber threats in distributed environments demands advanced frameworks for real-time detection and response across multimodal data streams. This paper introduces AgenticCyber, a generative AI powered multi-agent system that orchestrates specialized agents to monitor...

nginx-defender 安全漏洞

nginx-defender is a lightweight real-time log monitoring tool from the individual developer Anish Paleja. A security vulnerability exists in nginx-defender, which stems from the fact that default credentials may lead to bypassing security protections...

Logwatch 7.13

Logwatch analyzes and reports on unix system logs. It is a customizable and pluggable log monitoring system which will go through the logs for a given period of time and make a customizable report. It should work right out of the package on most systems...

THE NEW Rapid7 MDR for Enterprise: Tailored Detection and Response for Complex Environments

Complex ecosystems. Custom applications. Specialized log sources. Distributed operations. Enterprise security leaders aren’t just defending against threats—they’re navigating a fragmented environment where visibility, coverage, and coordination are constant challenges. Our MDR service provides...

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

Cybersecurity researchers have found that ransomware attacks targeting ESXi systems are also leveraging the access to repurpose the appliances as a conduit to tunnel traffic to command-and-control C2 infrastructure and stay under the radar. "ESXi appliances, which are unmonitored, are increasingl...

CVE-2024-50585 Reflected Cross-Site Scripting

Users who click on a malicious link or visit a website under the control of an attacker can be infected with arbitrary JavaScript which is running in the context of the "Numerix License Server Administration System Login" nlslogin.jsp page. The vulnerability can be triggered by sending a speciall...

CVE-2024-50585 Reflected Cross-Site Scripting

Users who click on a malicious link or visit a website under the control of an attacker can be infected with arbitrary JavaScript which is running in the context of the "Numerix License Server Administration System Login" nlslogin.jsp page. The vulnerability can be triggered by sending a speciall...

The Future of Serverless Security in 2025: From Logs to Runtime Protection

Serverless environments, leveraging services such as AWS Lambda, offer incredible benefits in terms of scalability, efficiency, and reduced operational overhead. However, securing these environments is extremely challenging. The core of current serverless security practices often revolves around...