SecAssessment-GapDetection-Thesis

D3FENDer - Security Assessment & Gap Detection Tool Using MITRE ATT&CK & D3FEND Frameworks D3FENDer is a rule-based CLI tool developed by Michael for his thesis titled Development of a security assessment and gap detection system using the MITRE ATT&CK and D3FEND Frameworks. It is designed to...

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 has been officially published by MITRE. Vulnerability Overview...

Mobile-Drop-Device-SOC-Detection

🛡️ Proyecto Phantom: Simulación de Detección SOC de "Drop Device" Móvil Este proyecto demuestra un taller de laboratorio SOC de extremo a extremo que simula cómo un dispositivo Android no autorizado y sin root Casper Via S, utilizado como "Drop Device" dentro de una red interna, es detectado a...

Threat matrix: Mapping threats across cloud web applications

In this article 1. Overview 2. Technique Catalog 3. Privilege Escalation 4. Mitigation and protection guidance 5. References 6. Learn more Microsoft introduces the cloud web applications threat matrix, a MITRE ATT &CK-aligned framework that helps defenders understand, prioritize, and mitigate...

ForensiX-Studio

ForensiX Studio Forensic Intelligence Platform | Malware Analysis | Threat Correlation Engine 🧠 Multi-Signal Analysis • ⚡ Behavioral Intelligence • 🎯 MITRE Mapping ⚠️ LEGAL DISCLAIMER ForensiX Studio is intended strictly for authorized digital forensics, security research, and defensive analysis. ...

siem-threat-detection-lab

🛡️ Laboratorio de SIEM + detección de amenazas Un laboratorio integral de blue team : un SIEM Wazuh 4.7.5 que detecta 7 ataques simulados — desde el escaneo de puertos y la fuerza bruta SSH hasta un exploit real de CVE Slowloris DoS — con cada evento registrado, alertado y mapeado a MITRE ATT &CK...

gp_netSecDSS

netSecDSS Decision Support System for Risk Assessing Network and System Security in SMEs A Docker-based network security monitoring platform built for small and medium enterprises that can't afford commercial SIEM tools. It simulates a realistic multi-subnet SME network, runs staged attack...

dfir-malware-investigation

DFIR Malware Investigation Lab – Spring4Shell CVE-2022-22965 A comprehensive Digital Forensics & Incident Response DFIR project that simulates, detects, and investigates the Spring4Shell CVE-2022-22965 critical vulnerability. This project demonstrates the complete incident response lifecycle from...

CVE-2021-42561

CVE-2021-42561: Command Injection via the Human Plugin in MITRE Caldera In Caldera versions =2.8.1 the Human plugin passes the unsanitized name parameter to a python "os.system" function. This allow attackers to use shell metacharacters e.g. backticks "" or dollar parenthesis "$" in order to esca...

CVE-2021-42559

CVE-2021-42559: Inyección de comandos mediante configuraciones en MITRE Caldera Caldera versiones =2.8.1 contiene múltiples "requisitos" de inicio que ejecutan comandos al iniciar el servidor. Debido a que estos comandos se pueden cambiar mediante la API Rest, un usuario autenticado puede inserta...

windows-malware-behavioral-analysis

Análisis de comportamiento de malware con REMnux y FLARE-VM Una investigación práctica de malware para el equipo azul que demuestra cómo se pueden analizar ejecutables sospechosos de Windows de forma segura dentro de un laboratorio aislado mediante técnicas de análisis de comportamiento. En lugar...

nuclei-cve-analyzer

Nuclei CVE Analyzer A fast CLI tool for analyzing CVE coverage in Nuclei templates. Nuclei CVE Analyzer takes a list of CVE IDs, scans a local Nuclei template repository, and determines which CVEs already have matching templates and which represent potential template coverage gaps. Built for...

EVTX-ATTACK-SAMPLES

Windows EVTX Samples 200 EVTX examples: This is a container for windows events samples associated to specific attack and post-exploitation techniques. Can be useful for: Testing your detection scripts based on EVTX parsing Training on DFIR and threat hunting using event logs Designing detection u...

SiemX

SIEM-X A lightweight Security Orchestration, Automation, an...

CVE-2026-82477

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

EUVD-2026-68115

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

CVE-2026-82477

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

CVE-2026-82477

MITRE SAF Heimdall versions 2.11.6 through 2.13.x are affected by a Server-Side Request Forgery (SSRF) vulnerability in the Tenable proxy endpoint , specifically in apps/backend/src/tenable/tenable.controller.ts. A remote, unauthenticated attacker can leverage this flaw to access internal network...

cybersecurity-home-lab-btp

🛡️ Laboratorio Domestico di Cybersecurity — Rilevamento e Monitoraggio B.Tech Project BTP | IIIT Pune Basato su: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi Un laboratorio domestico di cybersecurity completamente funzionant...

When Agents Go Rogue: The OpenClaw Supply Chain Crisis

When Agents Go Rogue: The OpenClaw Supply Chain Crisis By Aniket Choukde, Vikas Mishra and Yadunadh · August 19, 2026 This blog was also written by Akhil Reddy and Pavan Kumar Podila Executive Summary The cybersecurity landscape is currently undergoing a seismic shift driven by the adoption of...