149 matches found
scirius
======= Scirius Introduction Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. .. image:: https://github.com/StamusNetworks/scirius/raw/master/doc/images/suricata-index.png :alt: Suricata page :align: cent...
Antiphishing
Antiphishing — Predictive Phishing Intelligence for Suricata DONATE · DASHBOARD VECTORS · CONTRIBUTING · SUBMIT A VECTOR · REST API CTI · WIKI Predictive Phishing Intelligence for Suricata — Preemptive Defense from Day Zero Antiphishing is an open-source GPLv3 Cyber Threat Intelligence CTI...
coraza
Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...
nuvola
nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...
auditd
/ | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Configuration Idea The idea of this auditd configuration is to provide a best-practice baseline that is designed to load out-of-the-box on major Linux distributions covers a broad set of security-relevant...
ftw
⚠️ We are deprecating this project, please see our new testing framework in https://github.com/coreruleset/go-ftw Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset...
Elasticsearch_rules
Elasticsearchrules ElasticSearch Detection version of SOC prime watcher rules with some new Corelight rules Please note some of these rules should be tuned to your environment. To load in Elastic, download the ndjson and expand Security and go to alerts. Click on Managed Alerts and click import...
pfsense-api-snort-file-join
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-snort-file-join pfsense-api-snort-file-join Class: File read Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate GET /services/snort/rules/name/file takes two path parameters, both...
WindowsFirewallRuleset
Windows Firewall Ruleset !Alt Textcorporate firewall Table of Contents Windows Firewall Ruleset Table of Contents About Windows Firewall Ruleset Firewall rules Firewall framework The vision of this firewall License Requirements Requirements details I don't meet the requirements First time user...
modsecurity-cve-2018-6389
modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...
GraphDB .pie unicode-escape ruleset injection RCE
Anonymous upload of malicious .pie ruleset, graphdb:Sail repository creation, and /size trigger runs injected Runtime.exec on init. """GraphDB .pie ruleset namespace prefix injection unicode-escape unauth RCE.""" from future import annotations import json import re import uuid from kittysploit...
Ontotext GraphDB .pie Ruleset Namespace Prefix Injection Unauthenticated Root RC — Detect
Fingerprint / reachability check for Ontotext GraphDB .pie Ruleset Namespace Prefix Injection Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Ontotext GraphDB .pie Ruleset Namespace Prefix Injection Unauthenticated Root RCE""" from kittysploit import from...
ftw
Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...
deepsecrets
OWASP DeepSecrets — a better tool for secrets scanning What is it? Another token-wasting CLI proxy to an AI API? Absolutely not! In our LLM-hype era, DeepSecrets still runs entirely on your machine — giving you great results offline, securely, and for free. So why yet another tool? Most existing...
Hob0Rules
Hob0Rules Password cracking rules for Hashcat based on statistics and industry patterns. The following blog posts on passwords explain the statistical signifigance of these rulesets: Statistics Will Crack Your Password Praetorian Password Cracking Rules Released Useful wordlists to utilize with...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: prefer nftchainvalidate nftchainvalidate already performs loop detection, as a cycle in the process could lead to a call stack overflow ctx-level = NFTJUMPSTACKSIZE. It also iterates through the maps via t...
CVE-2026-93330
Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset...
CVE-2026-93330: Incorrect Behavior Order
Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset...
PT-2026-94410
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where the hardware offload step occurs before the chain blob is built. This sequence can lead to an inconsistent state where the...
