amun

Amun Amun è stato il primo honeypot a bassa interazione basato su Python, seguendo i concetti di Nepenthes ma estendendolo con emulazioni più sofisticate e una manutenzione più semplice. Requisiti Pyhon = 2.6 nessun supporto per Python3 ancora opzionale Python Psyco disponibile su...

micros_honeypot

MICROS honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Scritto da: Omer Cohen @omercnet Un ringraziamento speciale a: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev Contatto: [email protected] MICROS Honeypot è un honeypot a bassa interazione per rilevare CVE-2018-2636 nel...

HoneyPy

HoneyPy 🍯 Un honeypot a bassa interazione con la capacità di diventare un honeypot a media interazione. Stato del progetto: Non più in sviluppo attivo. Il repository rimarrà per chiunque voglia usare o contribuire a HoneyPy. Raccomando di usare invece honeydb-agent:...

Cisco-FMC-honeypot

FMC-Trap Un honeypot a bassa interazione che simula la superficie web di un Cisco Secure Firewall Management Center FMC e cattura traffico di attacco non autenticato di tipo serializzazione Java sonde di deserializzazione non sicura stile CVE. Sicuro per progettazione: l'applicazione non...

weblogic_honeypot

WebLogic honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Scritto da: Omer Cohen @omercnet Ringraziamenti speciali: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev Contatto: [email protected] WebLogic Honeypot è un honeypot a bassa interazione per rilevare CVE-2017-10271 nel...

HosTaGe

HosTaGe - Honeypot zum Mitnehmen Copyright C 2013-2021, Universität Aalborg Dänemark und Technische Universität Darmstadt Deutschland HosTaGe ist ein leichtgewichtiger, schwach interagierender, tragbarer und generischer Honeypot für mobile Geräte, der auf die Erkennung von bösartigen, drahtlosen...

ciscoasa_honeypot

Cisco ASA Honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Kontakt: [email protected] Ein Low-Interaction-Honeypot für die Cisco ASA-Komponente, der in der Lage ist, CVE-2018-0101 zu erkennen, eine DoS- und Remote-Code-Ausführungs-Schwachstelle. Es wird unter der MIT-Lizenz zur...

log4j-honeypot-flask

log4j-honeypot-flask Honeypot per rete interna per rilevare se un attaccante o una minaccia interna scansiona la tua rete per log4j CVE-2021-44228 Può essere installato su una workstation o server, eseguendo direttamente lo script Python app/app.py necessario python3, Flask e Requests o come...

HASH

HASH Honeypot Software HTTP Agnostic HASH è un framework per creare e avviare honeypot a bassa interattività. 🌟 Perché HASH? La filosofia principale di HASH è essere facile da configurare e flessibile per imitare qualsiasi software in esecuzione su HTTP/HTTPs. Con il minimo ingombro possibile per...

Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS

Adversarial attacks, wherein slight inputs are carefully crafted to mislead intelligent models, have attracted increasing attention. However, a critical gap persists between theoretical advancements and practical application, particularly in structured data like network traffic, where...

What Is a Honeypot❓ Definition, Types and More

A honeypot is a computer system made to appear like a potential target of a cyber-attack. It may be used to track or redirect hacks away from a legitimate target. It could like wise be utilized to comprehend the strategies that cybercriminals employ. Honeypots have been around for quite awhile, y...

HosTaGe - Low Interaction Mobile Honeypot

HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most malware propagate over the network via specific protocols, a low-interaction honeypot located at a mobile device can check...

TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability

Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...

User Agent String Switcher Service - XSS Vulnerabilities

Document Title: =============== User Agent String Switcher Service - XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2189 Release Date: ============= 2019-08-13 Vulnerability Laboratory ID VL-ID: ====================================...

HoneyPy - A Low To Medium Interaction Honeypot

A low interactionhoneypot with the capability to be more of a medium interaction honeypot. HoneyPy is written in Python2 and is intended to be easy to: install and deploy extend with plugins and loggers run with custom configurations Feel free to follow the QuickStart Guide to dive in directly. T...

Low, Medium and High Interaction Honeypot Security

Honeypots are a popular way to protect data centers and learn about attackers. Learn the difference between high and low interaction honeypot security...

Magento - Filter Bypass & Persistent Web Vulnerabilities

Document Title: =============== Magento - Filter Bypass & Persistent Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1916 Videos: 4 x Proof of Concept https://www.youtube.com/watch?v=WIDwbSTCLQ https://www.youtube.com/watch?v=zaPRfvNQJzk...

Mozilla Firefox v48.0.2 - (mozglue.dll) Denial of Service

Document Title: =============== Mozilla Firefox v48.0.2 - mozglue.dll Denial of Service References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1953 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ====================================...

Facebook (Law Enforcement) - Persistent Vulnerability

Document Title: =============== Facebook Law Enforcement - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1767 Release Date: ============= 2016-09-30 Vulnerability Laboratory ID VL-ID: ==================================== 1767...

SonicWALL NSA 2400 Security Dashboard跨站脚本漏洞

SonicWALL NSA 系列采用新一代统一威胁管理UTM技术抵抗各种攻击,兼备入侵防御、防病毒及反间谍软件功能和SonicWALL应用防火墙的应用层控制功能。 由于通过"sn" GET参数传递到/stats/dashboard.jsp的输入在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 SonicWALL Network Security Appliance NSA Series 厂商补丁： SonicWALL ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...