hunting-rules

Suricata ハンティングルール 別名 TGI HUNT ネットワーク異常検知を支援するSuricataルールです。これらのルールはパフォーマンス重視ではなく、高スループットネットワークでは性能が低下する可能性があります。Suricata バージョン7.0.3以上が必要です。 フィードバックや提案はこちらで歓迎します。 email blog...

PortDog

PortDog PortDog는 포트 스캐닝 기술을 탐지하기 위한 네트워크 이상 탐지기입니다. 전적으로 Python으로 작성되었으며 사용하기 쉬운 인터페이스를 제공합니다. Ubuntu 15에서 테스트되었습니다. RAW 패킷 캡처 문제로 인해 Windows OS에서는 작동하지 않습니다. 이 스크립트가 두 플랫폼 모두에서 작동하도록 작업 중입니다. 향후 악의적인 시도를 차단할 수 있는 방화벽 옵션을 추가할 계획입니다. 분석에 Raw 패킷을 사용합니다. 따라서 관리자권한 있는 세션에서 이 스크립트를 실행해야 합니다. 사용법:...

CVE-2024-7608

An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal...

CVE-2024-7608

An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal...

CVE-2019-9510

A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with the Windows lock screen. Should a network anomaly trigger a temporary RDP disconnect, Automatic...

Code injection

A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with the Windows lock screen. Should a network anomaly trigger a temporary RDP disconnect, Automatic...

CVE-2019-9510 Microsoft Windows RDP can bypass the Windows lock screen

A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with the Windows lock screen. Should a network anomaly trigger a temporary RDP disconnect, Automatic...

PortDog - Simple Python Script to Detect Port Scanning Techniques

PortDog is a network anomaly detector aimed to detect port scanning techniques. It is entirely written in python and has easy-to-use interface. It was tested on Ubuntu 15. Please note that, it is not working on Windows OS due to suffering from capturing RAW packets.I am working on to write this...

LastPass Asks Users To Change Password After Probable Breach

ED: LastPass Asks Users To Change Password After Probable Breach DEK: The Web based password management firm says it detected what it thinks is a breach that could have exposed some customer passwords. LastPass, a Web based password management firm, advised its customers to change the password th...