83 matches found
digital-forensics-lab
디지털 포렌식 연구소 및 공유 사이버 포렌식 인텔리전스 저장소 저장소 특징 대화형 디지털 포렌식 연구실: 학생과 교수진의 참여를 위해 맞춤 제작 Linux 중심 연구실 환경: 모든 연구실에 Kali Linux만 사용 시각적 학습 지원: 각 연구실에는 PowerPoint 프레젠테이션, 관련 파일 및 안내 스크린샷 포함 포괄적 범위: 디지털 포렌식 분야의 다양한 주제 포함 오픈 소스 도구: 사용된 모든 도구는 무료로 제공되며 오픈 소스임 지속적인 업데이트: DOJ, DHS, NSF의 지원을 받아 팀은 저장소를 정기적으로 업데이트할...
Red-Teaming-Toolkit
Red Teaming Toolkit このリポジトリには、攻撃者シミュレーション中に役立つ最先端のオープンソースセキュリティツール（OST）が含まれており、脅威ハンター向けの情報として、検出および防御制御を容易にすることも目的としています。以下にリストされているツールは、APTやヒューマンオペレーテッドランサムウェア（HumOR）などの脅威アクターによって悪用される可能性があります。このリストに貢献したい場合は、プルリクエストを送信してください。 目次 偵察 初期アクセス 配送 状況認識 認証情報ダンプ 権限昇格 防御回避 永続化 横方向の移動 データ窃取 その他 偵察 名前| 説明|...
pentagi
PentAGI P enetration testing A rtificial G eneral I ntelligence Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments. ⠀ Table of Contents Overview Features Architecture...
awesome-ai-security
Awesome AI Security 一份精选的 AI 安全相关框架、标准、学习资源和开源工具列表。 如果你想贡献内容，请创建 PR 或通过 @ottosulin 联系我。 目录 学习资源 阅读与指南 课程、实验室与 CTF 播客 治理与风险管理 框架 标准与验证 分类法、术语与风险数据库 清单与实用指南...
An-Integrated-Wireless-Network-Forensic-Analysis-Framework
An-Integrated-Wireless-Network-Forensic-Analysis-Framework 该框架将一组现有开源工具整合为一个集成包，自动化取证调查流程。它能够捕获无线网络流量，根据调查需求分析捕获的流量，并从分析后的流量中提取和记录数字证据。 攻击特征 该框架能够分析3种类型的攻击： DoS Evil Twin（邪恶双子星） WEP Crack（WEP破解） 先决条件 Kali Linux 1.0.9 如何运行该框架 ./applicationMain.py 框架的快速概念验证 https://youtu.be/H5VqpB3ales &...
libvshadow
libvshadow is a library to access the Volume Shadow Snapshot VSS format. The VSS format is used by Windows, as of Vista, to maintain copies of data on a storage media volume. Project information: Status: alpha Licence: LGPL-3.0-or-later Also see: OSDFC 2012: Paper - Windowless Shadow Snapshots:...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...
TekDefense
TekDefense TekDefense 的开放开发项目 所有项目均采用 MIT 许可证模型，这基本上意味着，你可以随意使用这些项目中的任何一个，但如果因使用或修改这些项目而发生任何损失或损害，请不要让我承担责任。 请访问 www.TekDefense.com 获取有关 InfoSec 主题的文章和教学视频 在 Twitter 上关注 @TekDefense。 邮箱：[email protected] 谢谢， -Ian...
git-all-secrets
git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...
awesome-rat
Todos los proyectos de colección RAT Más de 250 herramientas RAT/C&C de código abierto, más de 1200 informes de análisis de RAT/artículos relacionados con C&C. Versión en inglés Índice Herramientas de código abierto pupy - 1 herramienta 6 artículos Covenant - 3 herramientas 18 artículos Slackor -...
rekall
Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
UAT-8302 and its box full of malware
Cisco Talos is disclosing UAT-8302, a sophisticated, China-nexus advanced persistent threat APT group targeting government entities in South America since at least late 2024 and government agencies in southeastern Europe in 2025. After successful compromises, UAT-8302 deploys multiple custom-made...
Automated Generation of Cybersecurity Exercise Scenarios
There is a growing need for cybersecurity professionals with practical knowledge and experience to meet societal needs and comply with new standards and regulations. At the same time, the advances in software technology and artificial intelligence point towards a future where software agents will...
CVE-2025-66215 OpenSC: Stack-buffer-overflow WRITE in card-oberthur
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that...
AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities
From an Anthropic blog post: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. This illustrates h...
AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities
Really interesting blog post from Anthropic: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. Th...
Zero-Day Zero: The AI Attack That Just Ended the Era of the Forgiving Internet
Why the Exploit Window Has Collapsed and How CISOs Must Pivot to Survive For decades, cybersecurity was a game of time. We banked on the buffer between a vulnerability’s disclosure and its widespread exploitation. We relied on the forgiving internet, where human attackers needed days or weeks to...
Mysterious Elephant: a growing threat
Introduction Mysterious Elephant is a highly active advanced persistent threat APT group that we at Kaspersky GReAT discovered in 2023. It has been consistently evolving and adapting its tactics, techniques, and procedures TTPs to stay under the radar. With a primary focus on targeting government...
