cyber-decoy

cyber-decoy A containerized network decoy honeypot that advertises SSH , RDP , and SMB , observes every inbound connection with eBPF , and reverse-proxies each session into an isolated decoy container. The design separates two concerns: 1. Observation. An eBPF TC classifier attached to the broker...

Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY An evidence-first threat-observation system that keeps current source state, material-change events, and operational fetch telemetry semantically separate. Missing, stale, disabled, or unavailable data remains visibly missing. The interface never substitutes demo...

CVE-2026-80976

creationtimestamp| type| source ---|---|--- 2026-09-13 12:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfn2uz2so2t...

CVE-2020-37168

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:05+00:00| seen| https://t.me/shimiscyberworld/1455 2026-09-13 00:00:56+00:00| seen| https://t.me/shimiscyberworld/1455...

CVE-2026-79298

creationtimestamp| type| source ---|---|--- 2026-09-11 16:00:05+00:00| seen| https://t.me/GithubRedTeam/102023 2026-09-12 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102023 2026-09-14 03:00:15+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-...

CVE-2026-77109

creationtimestamp| type| source ---|---|--- 2026-09-09 11:49:06+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv3hs57vsa26 2026-09-12 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mve5fnnzil2p...

CVE-2023-37569

creationtimestamp| type| source ---|---|--- 2026-09-08 10:00:05+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-07 2026-09-08 11:00:33+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d75a83-4aac-4637-aae0-5a1fce957eb8 2026-09-09...

CVE-2026-81790

creationtimestamp| type| source ---|---|--- 2026-09-08 09:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muynwy3nox23...

windows-malware-behavioral-analysis

使用 REMnux 与 FLARE-VM 进行恶意软件行为分析 一个实用的蓝队恶意软件调查项目，演示如何利用行为分析技术在隔离的实验室内安全地分析可疑的 Windows 可执行文件。 与对恶意软件源代码进行逆向工程不同，本项目侧重于观察运行时行为、收集主机与网络遥测数据、提取入侵指标（IOC），并将攻击者活动映射到 MITRE ATT&CK 框架。 目标 构建安全的恶意软件分析实验室 观察恶意软件执行期间的行为 监控 Windows 主机活动 捕获恶意网络流量 识别持久化机制 提取入侵指标（IOC） 将调查结果映射到 MITRE ATT&CK 挖掘检测机会 调查工作流程 阶段 1 —...

CVE-2026-86290

creationtimestamp| type| source ---|---|--- 2026-09-07 09:58:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dvkcygitjfpyg...

CVE-2025-15614

creationtimestamp| type| source ---|---|--- 2026-09-06 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mutvuhpqyb2e...

CVE-2026-85769

creationtimestamp| type| source ---|---|--- 2026-09-05 07:00:03+00:00| seen| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0 2026-09-06 00:00:53+00:00| published-proof-of-concept| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0...

CVE-2021-2302

creationtimestamp| type| source ---|---|--- 2026-09-04 05:00:03+00:00| seen| Telegram/wsozqluPlW06AoXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U 2026-09-05 01:00:39+00:00| published-proof-of-concept| Telegram/wsozqluPlW06AoXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U...

CVE-2026-83711

creationtimestamp| type| source ---|---|--- 2026-09-03 23:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cihjozta4ga6y 2026-09-04 00:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3munoc3rw2q2g 2026-09-04 01:30:04+00:00| seen|...

CVE-2026-85012

creationtimestamp| type| source ---|---|--- 2026-09-03 19:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54bf6vr24 2026-09-03 19:04:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iofkhwgq3tae3 2026-09-03 20:32:56+00:00| seen|...

CVE-2019-14439

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:07+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03 00:00:57+00:00| published-proof-of-concept| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A...

CVE-2016-7944

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49649 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45702 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49649 2026-09-02 01:02:04+00:00| seen|...

CVE-2023-31893

creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:57+00:00| seen| https://t.me/hackingAttack/105906 2026-09-02 01:01:17+00:00| seen| https://t.me/hackingAttack/105906 2026-09-04 13:00:03+00:00| seen| https://t.me/hackingAttack/105906 2026-09-05 01:00:27+00:00| seen|...

CVE-2021-2254

creationtimestamp| type| source ---|---|--- 2026-09-01 17:00:42+00:00| seen| https://t.me/cissp/4032 2026-09-02 01:04:29+00:00| seen| https://t.me/cissp/4032 2026-09-10 22:00:02+00:00| seen| https://t.me/cissp/4032 2026-09-11 00:00:10+00:00| seen| https://t.me/cissp/4032...