canarytokens-docker

Dockerized Canarytokens Thinkst Applied Research 제공 개요 Canarytokens는 네트워크에서의 활동과 동작을 추적하는 데 도움을 줍니다. 문제가 발생하면 여기에서 FAQ를 확인하거나 이슈를 생성해 주세요. 최대한 빨리 답변드리겠습니다. 목차 행동 강령 사전 요구 사항 v3로 마이그레이션 설정 Ubuntu 데이터 유지 HTTPS 활성화 방법 Canarytokens 사이트에 기본 인증 활성화 새로운 기능 FAQ 기여 행동 강령 이 프로젝트와 이 프로젝트에 참여하는 모든 사람은 행동 강령의...

linux-malware-detect

Linux Malware Detect LMD Linux용 멀웨어 스캐너 — 다단계 위협 탐지MD5, SHA-256, HEX, YARA, 통계 분석, ClamAV 통합, 실시간 inotify 모니터링, 격리/정리/복원 작업, 다중 채널 알림이메일, Slack, Telegram, Discord. C 2002-2026, R-fx Networks C 2026, Ryan MacDonald GNU GPL v2에 따라 라이선스가 부여됨 2.0.1 새로운 기능 43배 더 빠른 네이티브 스캔 엔진 — 네이티브 스캐닝 파이프라인이 배치 병렬 처...

experiments

Experiments Repository of various experiments / PoC. debugging-secure-kernel: PoC gdb debugging the Windows 10 secure kernel, on top of QEMU KVM dns: Experiments regarding DNS / Certificate transparency / Homoglyphs Attack Surface Reduction: Demystifying Windows Attack Surface Reduction internals...

process-enumeration-stealth

🚴 process-enumeration-stealth What is this? This is a simple PoC which allows you to return a list of PIDs currently using NTFS, by querying the \ntfs\ base device the Windows filesystem base object. Using this method circumvents the need to use typical APIs, such as NtQuerySystemInformation or t...

CVE-2026-87110

An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue...

CVE-2026-87108

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

CVE-2026-87108 Ops Manager Improper Authorization in Daily Host Monitoring Retrieval

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

EUVD-2026-95491

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

CVE-2026-87108

An authenticated Ops Manager user with a read-only project role can exploit a flaw in daily host monitoring retrieval. Due to insufficient ownership validation , an attacker possessing a specific record identifier can retrieve a monitoring record associated with a different project . This unautho...

Ops Manager Improper Authorization in Daily Host Monitoring Retrieval

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

EUVD-2026-95490

An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue...

CVE-2026-87110

The Ops Manager web port is susceptible to uncontrolled resource consumption (CWE-770). An unauthenticated user with network access can repeatedly request specific monitoring endpoints that perform costly operations. Because these endpoints lack rate limiting , the attack can temporarily slow dow...

internalblue

Broadcom 칩은 약 10억 대의 기기에서 사용되고 있으며, 예를 들어 모든 iPhone , MacBook , Samsung Galaxy S 시리즈, 구형 Google Nexus 시리즈, 구형 Thinkpad , Raspberry Pi , 다양한 IoT 기기 등이 있습니다. 2016년, Cypress 가 Broadcom 의 IoT 사업부를 인수했습니다. 이후 Broadcom 이 Apple 및 Samsung 과 같은 비-IoT 고객을 유지하면서 펌웨어 변형이 약간 분기되었습니다. 그러나 펌웨어 상호 작용 및 업데이트 메커니즘...

securitybot

Securitybot ¡Alertas distribuidas para las masas! Securitybot es una implementación de código abierto de un chatbot de alertas distribuidas, como se describe en la publicación del blog de Ryan Huber. Las alertas distribuidas mejoran la eficiencia de monitoreo de tu equipo de seguridad y pueden...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

security_monkey

NOTA: Security Monkey está en modo de mantenimiento y llegará al final de su vida útil en 2020. Para usuarios de AWS, utilice AWS Config. Para usuarios de GCP, utilice Cloud Asset Inventory. Security Monkey Security Monkey supervisa tus cuentas de AWS y GCP en busca de cambios de políticas y aler...

kemon

Kemon Un framework de código abierto basado en callbacks Pre y Post para la monitorización del kernel de macOS. Noticias de última hora - 08/28/2019 Notas de la versión de macOS Catalina 10.15 Beta 7 https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...