9975 matches found
CVE-2019-17571
CVE-2019-17571/Apache Log4j 1.2.X存在反序列化远程代码执行漏洞 漏洞预警参考链接： https://mp.weixin.qq.com/s/okU2y0izfnKXXtXG3EfLkQ 1. 漏洞描述 Apache Log4j是美国阿帕奇（Apache）软件基金会的一款基于Java的开源日志记录工具.Apache Log4j 1.2.X系列版本中存在反序列化远程代码执行漏洞.攻击者可利用该漏洞执行任意恶意命令.在Log4j...
EventLogging
Aviso Este repositorio ya no se mantiene a partir de abril de 2024 BHIS Aviso Este repositorio ya no se mantiene a partir de abril de 2024 EventLogging Este repositorio contiene una guía para configurar el registro de eventos. Esta guía está dividida en secciones, Condición de Preparación Defensi...
CVE-2022-23305_POC
CVE-2022-23305 Log4j JDBCAppender POC de inyección SQL Esta es una aplicación muy sencilla basada en Spring Boot que demuestra la vulnerabilidad CVE-2022-23305. Utiliza Apache Maven, Spring Boot, Spring MVC y la base de datos en memoria H2 para registrar una entrada simple, tomada como un parámet...
CVE-2026-63208
The open source helpdesk system Zammad is vulnerable to sensitive information disclosure in versions prior to 7.1.2 . When a Microsoft Graph request fails, the system logs the authentication token with incomplete masking. Specifically, for JWT formats, only the first part is hidden, leaving the r...
sysmon-modular
sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...
cirro-azcli-ext
cirro-azcli-ext Una extensión de Azure CLI que recopila de forma pasiva datos de recursos de Azure en una base de datos SQLite compatible con el esquema de Cirro https://github.com/bishopfox/cirro. También registra todas las invocaciones de la CLI en un archivo JSON-lines. Se engancha a los event...
Log4Shell-CVE-2021-44228-Demo
CVE-2021–44228 Demo 1. Introducción a CVE-2021–44228 La noticia más grande en el mundo de la ciberseguridad a finales de 2021 fue la vulnerabilidad de Log4j, numerada como CVE-2021-44228, también conocida como Log4Shell. Fue clasificada con la puntuación máxima de gravedad de 10 en el sistema de...
LDAPMon
LDAPMon LDAPMon es un recopilador de telemetría POC para el proveedor ETW Microsoft-Windows-LDAP-Client. Una vez iniciado, los registros se almacenarán en el Visor de eventos. Este POC incluye un analizador de Sentinel para que, si desea recopilar estos datos dentro de un SIEM, pueda hacerlo. Se...
Radium
| \ | | | | | | | | | | | | | | | //|/ | | | | | ' \ | |/ / \ | | | |/ \ / |/ |/ \ '| | | \ \ | | | | | || | | | | | | | 开发者：Mehul Jain -- 仅适用于 Windows | | | | | | | | | / / || | | | ' / / | | | | / | | || | | | | | / || |, || ,| | ||/ -- 应用程序和按键记录 -- 屏幕截图记录 -- 驱动器目录结构 -- 通过邮件发送日志 -- 密码恢复，支持：...
CVE-2026-85417
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...
Audix
| / /| | / / / / / |// / // // // / / // |,/ ,/ // //|| 是一个 PowerShell 工具，用于快速配置 Windows 事件审计策略，以进行监控和事件响应。 请注意：此工具只会更改本地安全策略。如果应用于存在 GPO 设置的主机，最好在组策略默认配置文件中使用相同的设置，以确保所有系统获得相同的配置。如果未更改 GPO 配置文件以匹配这些设置，GPO 强制刷新将覆盖此配置。 Audix 允许简单配置 Windows 事件审计策略。Windows 的审计策略默认是受限的。这意味着事件响应人员、蓝队成员、CISO 以及希望通过...
dns-honeypot
我运行DNS蜜罐的头24小时 作为一名大部分时间都埋头于可观测性工具的工程师，偶尔会有一些我必须去实践的想法。这就是其中一次实验：在一个干净的IP上启动一个DNS解析器，该IP未被任何人宣传，然后让互联网随意与之通信。这个解析器唯一的任务就是保持安静、记录一切，并将结果查询输入Grafana。执行一次docker compose up...
CVE-2020-11932
CVE-2020-11932 🐛🔍 检查 CVE-2020-11932 并测试与此漏洞相关的主机 使用方法 下载 git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh 使用 curl（无需下载） bash curl -s https://raw.githubusercontent.com/Staubgeborener/CVE-2020-11932/master/cve-2020-11932.sh ...
CVE-2026-85417
Brocade SANnav versions prior to 3.0.1a are vulnerable to incomplete property masking within the logging subsystem. Under specific configuration conditions, this flaw allows SNMP authentication and privacy passwords to be recorded in plain text within application logs. Attackers with read access ...
CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...
CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...
EUVD-2026-86485
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...
CVE-2026-85417: Insertion of Sensitive Information into Log File
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...