1989 matches found
MSRPC-to-ATTACK
MSRPC-To-ATT&CK A repository that maps commonly used MSRPC protocols to Mitre ATT&CK while providing context around potential indicators of activity, prevention opportunities, and related RPC information. List of MSRPC Protcols: MS-SCMR: Service Control Manager Remote Protocol MS-SCMR.md MS-DRSR:...
sysmon-modular
sysmon-modular | A Sysmon configuration repository for everybody to customise This is a Microsoft Sysinternals Sysmon download here configuration repository, set up modular for easier maintenance and generation of specific configs. Please keep in mind that any of these configurations should be...
IATelligence
IATelligence IATelligence is a Python script that extracts the Import Address Table IAT from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could...
whodunit
whodunit Recognizing the most likely APT groups responsible for an incident Description This program takes a report from a cybersecurity incident containing the MITRE ATT&CK techniques that have been detected to have been used in the incident and tries to recognize which APT groups are the most...
DeTTECT
Detect Tactics, Techniques & Combat Threats Latest version: 2.2.0 To get started with DeTT&CT, check out one of these resources: This page on the Wiki. This blog written by Renaud Frère from NVISO has a comprehensive and recent description on the capabilities of DeTT&CT. Blog:...
Purpleteam
Purpleteam work in progress Scripts i made to trigger events for SOC detections, mapped to MITRE ATT&CK techniques...
adversary_emulation_library
Adversary Emulation Library In collaboration with Center Participants, the MITRE Center for Threat-Informed Defense Center maintains a library of adversary emulation plans to allow organizations to evaluate their defensive capabilities against the real-world threats they face. Emulation plans are...
cve-2023-23397-detection-lab
CVE-2023-23397 Detection & Mitigation Research Lab Project Overview This project investigates CVE-2023-23397 in an isolated cybersecurity lab environment, with a focus on detection, network traffic analysis, endpoint telemetry, and mitigation rather than offensive exploitation. The project aims t...
pyattck
Bienvenido a la documentación de pyattck root@kitploit: . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | La versión actual es 7.1.1...
reternal-quickstart
RE:TERNAL Nota: Todavía en desarrollo, solo usar para pruebas y ¡no exponer interfaces! El compose actual aún no funciona, solo intente si sabe lo que está haciendo RE:TERNAL es un servicio centralizado de orquestación de purple team para gestionar frameworks C2 de terceros. Los agentes se instal...
enterpriseattack
enterpriseattack - MITRE's Enterprise ATT&CK® A lightweight Python module to interact with the MITRE ATT&CK Enterprise dataset. Built to be used in production applications due to it's speed and minimal depedancies. Read the docs for more info. MITRE ATT&CK® MITRE ATT&CK® is a globally-accessible...
SiemX
SIEM-X A lightweight Security Orchestration, Automation, an...
CVE-2026-82477
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...
CVE-2026-82477
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...
EUVD-2026-68115
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...
CVE-2026-82477
MITRE SAF Heimdall versions 2.11.6 through 2.13.x are affected by a Server-Side Request Forgery (SSRF) vulnerability in the Tenable proxy endpoint , specifically in apps/backend/src/tenable/tenable.controller.ts. A remote, unauthenticated attacker can leverage this flaw to access internal network...
cybersecurity-home-lab-btp
🛡️ Laboratorio Domestico di Cybersecurity — Rilevamento e Monitoraggio B.Tech Project BTP | IIIT Pune Basato su: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi Un laboratorio domestico di cybersecurity completamente funzionant...
When Agents Go Rogue: The OpenClaw Supply Chain Crisis
When Agents Go Rogue: The OpenClaw Supply Chain Crisis By Aniket Choukde, Vikas Mishra and Yadunadh · August 19, 2026 This blog was also written by Akhil Reddy and Pavan Kumar Podila Executive Summary The cybersecurity landscape is currently undergoing a seismic shift driven by the adoption of...
PT-2026-71699
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The API scope middleware incorrectly classifies the 'GET /api/v1/user/actions/runners/registration-token' endpoint, as well as its owner- and repository-level...