cowrie

Cowrie Cowrieとは Cowrieは、中〜高対話型のSSHおよびTelnetハニーポットで、ブルートフォース攻撃と攻撃者によるシェル操作を記録するように設計されています。中対話型モード（シェル）ではPythonでUNIXシステムをエミュレートし、高対話型モード（プロキシ）ではSSHおよびTelnetプロキシとして機能し、別のシステム上での攻撃者の挙動を観察します。LLMモードでは、大規模言語モデルを使用して攻撃者のコマンドに対する動的な応答を生成します。 Cowrie はMichel Oosterhofによってメンテナンスされています。 ドキュメント ドキュメントは こちら...

pgaudit

pgAudit オープンソース PostgreSQL 監査ログ記録 はじめに PostgreSQL Audit Extension pgAudit は、標準の PostgreSQL ログ機能を介して、詳細なセッションおよびオブジェクトの監査ログを提供します。 pgAudit の目標は、政府、金融、ISO 認証などの要件を満たすために必要な監査ログを生成する機能を PostgreSQL ユーザーに提供することです。 監査とは、通常、独立した機関による個人または組織のアカウントの公式な検査です。pgAudit...

agentwatch

agentwatch Claude Code 세션용 비행 기록기입니다. Claude Code를 머신에서 실행하게 놔두세요 — 때로는 몇 시간, 때로는 자동 승인으로. agentwatch는 모든 작업을 조용히 기록하여, 나중에 돌아와 정확히 무슨 일이 일어났는지 확인할 수 있습니다. root@kitploit: npm install -g agentwatch-dev agentwatch install 그게 다입니다. 두 개의 명령어입니다. agentwatch는 이제 모든 Claude Code 세션을 기록하고 있습니다. 실제로 사용할 명령...

cyber-decoy

cyber-decoy コンテナ化されたネットワークデコイ（ハニーポット）で、SSH 、RDP 、SMB をアドバタイズし、eBPF で全ての受信接続を観測し、各セッションを隔離されたデコイコンテナにリバースプロキシします。 設計では2つの関心事を分離しています: 1. 観測. ブローカーのインターフェースにアタッチされた eBPF TC クラシファイアが、デコイが提供していないポートへのスキャンも含め、全ての受信 TCP SYN を記録します。これによりプロービングアクティビティを完全に可視化できます。 2. 対話...

Aker

Aker SSH Gateway Aker란 무엇인가? Aker는 자체 Linux SSH 점프/배스천 호스트를 구성하는 데 도움을 주는 보안 도구입니다. 이집트 신화에서 경계를 지키는 신의 이름을 따서 명명된 Aker는 모든 시스템 관리자와 지원 직원이 Linux 프로덕션 서버에 액세스할 때 통과해야 하는 병목 지점 역할을 합니다. Aker SSH 게이트웨이는 수천 대의 Linux 서버를 쉽게 관리하고 관리할 수 있도록 도와주는 많은 보안 기능을 포함하고 있습니다. 자세한 내용은 Wiki를 확인하세요. 동기 CryptoAudito...

PT-2026-51588

Name of the Vulnerable Software and Affected Versions foreman-mcp-server affected versions not specified Red Hat Satellite affected versions not specified Description A session management issue in the MCP Server allows unauthenticated attackers to hijack active administrative sessions. This occur...

EUVD-2019-19922

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

CVE-2019-25590 Axessh 4.2 Denial of Service via Log File Name

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

CVE-2019-25590

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

PT-2026-26978

Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by supplying an excessively long string in the log file name field. Attackers can enable session logging, paste a buffer of 500 or more characters into the log...

CVE-2025-20329 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid...

EUVD-2022-32137

Malicious code in bioql PyPI...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

CVE-2024-3982

CVE-2024-3982 affects Hitachi Energy MicroSCADA X SYS600. A local attacker could enable the product’s session logging and attempt to hijack an already established session. By default, session logging is disabled and only administrators can enable it. Several connected sources also describe a loca...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

PT-2024-8680 · Unknown · Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: MicroSCADA X SYS600 affected versions not specified Description: The issue is related to bypassing the authentication procedure in the MicroSCADA X SYS600 system. An attacker with local access to the machine where MicroSCADA X SYS600 is...

Metasploit Weekly Wrap-Up 07/26/2024

New module content 3 Magento XXE Unserialize Arbitrary File Read Authors: Heyder and Sergey Temnikov Type: Auxiliary Pull request: 19304 contributed by heyder Path: gather/magentoxxecve202434102 AttackerKB reference: CVE-2024-34102 Description: This adds an auxiliary module for an XXE which resul...