KilledProcessCanary

Windows Killed Process Canary A Windows Service to detect if it has been shutdown and hibernate if multiple instances are. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

neko-master

Neko Master See your network traffic clearly. Real-time monitoring · Traffic auditing · Multi-gateway support English | 中文 !IMPORTANT Disclaimer This project is a traffic analysis and visualization tool for local gateway environments. It does not provide any network access service, proxy...

home_SOC_suite

Home SOC Suite — Night's Watch A personal Security Operations Center SOC built from scratch during an Anwendungsentwicklung retraining program. This suite monitors a Windows endpoint for network anomalies, resource spikes, process execution, registry changes, Security Event Log activity, schedule...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

Detection-CheatEngine

Detection-CheatEngine Principle Understanding ReadDirectoryChangesW Expansion You can add your detection vector easily in CEInfo.h pragma once define CEDETECTION1 L"ADDRESSES.FIRST" define CEDETECTION2 L"MEMORY.FIRST" Compile Visual Studio 2022 llvm-msvc link Some discussions on UnknownCheats...

signalops

Signal OPS A full-spectrum, all-source signal intelligence fusion platform for security research and training. Signal OPS pulls dozens of open collection sources — WiFi/Bluetooth/cell-tower databases, internet-exposure scanners, camera indexes, ADS-B flight feeds, satellite TLE tracking, and...

solarview-ics-vulnerability-analysis

SolarView ICS Vulnerability Analysis A cyber-physical threat analysis of the SolarView Compact / Mirai botnet incident, in which attackers exploited CVE-2022-29303 to compromise roughly 800 solar monitoring appliances at Japanese photovoltaic facilities. Course project for ECE 362 — Cyber-Physica...

detect-ransomware-filenames

Detect Ransomware Filenames This package/script watches SMB transactions to look for known bad filenames that ransomware is known to use. It rides on top of the Anti-Ransomware File System Resource Manager Lists maintained here. How to use A Python script download-list.py is included to be able t...

ai-bot-ip-ranges

AI Bot IP Ranges A collection of official IP ranges for AI bot crawlers from major providers. Overview This repository tracks and aggregates IP address ranges published by AI providers for their web crawlers. These ranges are useful for: Verifying legitimate bot traffic Configuring firewall rules...

changedetection.io

Rileva automaticamente le modifiche ai siti web — Monitora i cambiamenti delle pagine web in tempo reale Monitora i siti web per aggiornamenti — ricevi notifiche via Discord, Email, Slack, Telegram, Webhook e molti altri. Rileva le modifiche al contenuto delle pagine web e ricevi avvisi istantane...

Intrusion-Alert-Educational-Network-IDS

🛡️ Intrusion-Alert-Educational-Network-IDS A lightweight Intrusion Detection System IDS built with Python to monitor network traffic and detect potential DoS/DDoS attacks based on request rate per IP. 📌 Features 📡 Real-time packet sniffing using Scapy 📊 Tracks number of requests per IP address 🚨...

Is Your DDoS Protection Actually On?

Readiness is a visibility problem, and it's one many organizations don't know they have. Most security controls tell you when they're broken. A bad firewall rule lets traffic through that shouldn't be there. An expired certificate generates alerts. A misconfigured WAF starts blocking legitimate...

net.kieker-monitoring:analysis (>=2.0.0, <=2.0.2), net.kieker-monitoring:monitoring-aspectj (>=2.0.0, <=2.0.2) +6 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.2.1)

com.rabbitmq:amqp-client MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.kieker-monitoring:analysis =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.20.0, =2.20.0, =2.20.4 -...

CVE-2026-107207

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

EUVD-2026-94386

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

CVE-2026-107207

LMCache versions through 0.5.5 are vulnerable to a server-side request forgery (SSRF) vulnerability in the frontend monitoring service. Due to missing authentication in the frontend node catalog, unauthenticated attackers can register arbitrary hosts via POST /api/proxies . Once registered, these...

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

CVE-2026-105242

A flaw was found in log4net. A remote attacker can exploit this issue by sending a crafted request containing content such as markup that triggers ASP.NET request validation. When log4net attempts to parse the request parameters, an unhandled exception occurs, causing the logging system to discar...