DECEIVE

DECEIVE DECEIVE，即带评估集成验证引擎的欺骗系统 （DECeption with Evaluative Integrated Validation Engine），是一个高交互、低维护的蜜罐系统。与大多数高交互蜜罐不同，DECEIVE 不会向攻击者提供任何真实系统的访问权限。AI 实际承担了模拟逼真蜜罐系统的全部工作，其依据是一个可配置的系统提示词，描述您希望模拟的系统类型。与许多其他需要投入大量精力来填充真实用户、数据和应用程序的高交互蜜罐不同，DECEIVE 的 AI 后端会自动为您完成这一切。 此版本的 DECEIVE 通过 SSH 协议模拟 Linux...

EUVD-2021-1504

Malware in sbrugna...

GHSA-23R4-5MXP-C7G5 parse-server new anonymous user session acts as if it's created with password

Impact Developers that use the REST API to signup users and also allow users to login anonymously. When an anonymous user is first signed up using REST, the server creates session incorrectly, particularly the authProvider field in Session class under createdWith shows the user logged in creating...