ftw

Framework per testare i WAF FTW Scopo Questo progetto è stato creato da ricercatori di ModSecurity e Fastly per fornire test rigorosi per le regole WAF. Utilizza l'OWASP Core Ruleset V3 come linea di base per testare le regole su un WAF. Ogni regola del ruleset viene caricata in un file YAML che...

scirius

Scirius Introduzione Scirius Community Edition è un'interfaccia web dedicata alla gestione dei ruleset di Suricata. Gestisce il file delle regole e l'aggiornamento dei file associati. .. image:: https://github.com/StamusNetworks/scirius/raw/master/doc/images/suricata-index.png :alt: Pagina Surica...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

auditd

root@kitploit: / | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Konfiguration Idee Die Idee dieser Auditd-Konfiguration ist es, eine Best-Practice-Basislinie bereitzustellen, die out-of-the-box auf den wichtigsten Linux-Distributionen funktioniert eine...

WindowsFirewallRuleset

Windows Firewall Ruleset Inhaltsverzeichnis Windows Firewall Ruleset Inhaltsverzeichnis Über Windows Firewall Ruleset Firewall-Regeln Firewall-Framework Die Vision dieser Firewall Lizenz Anforderungen Anforderungen im Detail Ich erfülle die Anforderungen nicht Erstbenutzer Warnung Hinweis...

Hob0Rules

Hob0Rules Passwort-Cracking-Regeln für Hashcat, basierend auf Statistiken und Branchenmustern. Die folgenden Blogbeiträge über Passwörter erklären die statistische Signifikanz dieser Regelsets: Statistics Will Crack Your Password Praetorian Password Cracking Rules Released Nützliche Wortlisten zu...

ftw

Framework per testare WAF FTW Scopo Questo progetto è stato creato da ricercatori di ModSecurity e Fastly per fornire test rigorosi per le regole WAF. Utilizza l'OWASP Core Ruleset V3 come baseline per testare le regole su un WAF. Ogni regola del ruleset viene caricata in un file YAML che emette...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 Ein ModSecurity-Regelsatz zur Erkennung potenzieller Angriffe mit CVE-2018-6389. Weitere Informationen finden Sie unter https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

Elasticsearch_rules

Elasticsearchrules SOC prime watcher नियमों का ElasticSearch डिटेक्शन संस्करण, जिसमें कुछ नए Corelight नियम शामिल हैं कृपया ध्यान दें कि इनमें से कुछ नियमों को आपके वातावरण के अनुसार ट्यून करने की आवश्यकता हो सकती है। Elastic में लोड करने के लिए, ndjson डाउनलोड करें और Security का विस्तार करें तथ...

Antiphishing

DONA - VETTORI DASHBOARD - CONTRIBUTI - INVIA UN VETTORE - REST API CTI - WIKI Intelligence predittiva anti-phishing per Suricata: blocca l'avversario al giorno zero Antiphishing è un'infrastruttura open-source GPLv3 di Cyber Threat Intelligence CTI e un ruleset Suricata progettato per...

coraza

Coraza - Web Application Firewall...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

Astra Linux - Vulnerability in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: prefer nftchainvalidate nftchainvalidate already performs loop detection because a cycle will result in a call stack overflow ctx-level = NFTJUMPSTACKSIZE. It also processes maps via the -validate callback in...

Arbitrary code execution

Impact WordPress Coding Standards WordPressCS versions before 3.4.1 contain an arbitrary code execution vulnerability in the WordPress.WP.EnqueuedResourceParameters sniff. As a result, running PHPCS with WordPressCS over untrusted PHP code, for example, in a CI pipeline that lints pull requests, ...

SUSE CVE-2026-52988

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: join hook list via splicelistrcu in commit phase Publish new hooks in the list into the basechain/flowtable using splicelistrcu to ensure netlink dump list traversal via rcu is safe while concurrent ruleset...

CVE-2026-52988

A flaw was found in the Linux kernel's netfilter component. This vulnerability involves a concurrency issue during updates to netfilter rulesets. When multiple updates occur simultaneously, improper synchronization could lead to unsafe data access during netlink dump list traversal. This could...

Linux Distros Unpatched Vulnerability : CVE-2026-52988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: join hook list via splicelistrcu in commit phase Publish new hooks in the list into the basechain/flowtable using splicelistrcu to ensure...

EUVD-2026-38856

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: join hook list via splicelistrcu in commit phase Publish new hooks in the list into the basechain/flowtable using splicelistrcu to ensure netlink dump list traversal via rcu is safe while concurrent ruleset...

CVE-2026-52988

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: join hook list via splicelistrcu in commit phase Publish new hooks in the list into the basechain/flowtable using splicelistrcu to ensure netlink dump list traversal via rcu is safe while concurrent ruleset...

CVE-2026-52988

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: join hook list via splicelistrcu in commit phase Publish new hooks in the list into the basechain/flowtable using splicelistrcu to ensure netlink dump list traversal via rcu is safe while concurrent ruleset...