26 matches found
worldmonitor
World Monitor 简体中文 | 日本語 Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface. !Commodity...
prowler
Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...
DDWPasteRecon
DDWPasteRecon 粘贴网站（Pastesites）是允许用户通过名为“粘贴”（pastes）的公共帖子分享纯文本的网站。 一旦攻击者攻破了外部边界并获取了内部资源的访问权限，他们就会将部分数据发布到“粘贴”网站上，如 pastebin 或 hastebin。当这些黑客或恶意组织在这些网站上发布数据转储时，其他用户就可以通过粘贴网站看到敏感信息。 由于各种恶意组织现在将这些服务用作通信渠道、临时存储或共享，以及其他各种来源被用于交易 POC 代码，我认为提供一个简单工具来帮助组织的蓝队和红队通过 Google 搜索语法（Google dorks）获得对这些网站的可见性是一个好主意...
reconerator
概述 这是一个自定义的 .NET 程序集，用于执行一系列态势感知活动。目前包含以下功能集： BASIC - 从磁盘和注册表获取信息。 LDAP - 允许执行自定义的 AD LDAP 查询。 RESOLVEHOST - 执行 DNS 查询解析。 INDEXSEARCH - 搜索 Windows 索引服务中的本地文件和电子邮件（按文件名和内容）。 PROXYCHECK - 显示访问指定 URL 时将使用的代理服务器。 我在编写此工具时并不知道 GhostPack 正在开发中；最终我们几乎同时发布了各自的工具。实际上，GhostPack 现在的功能要丰富得多。我已移除 PrivescCheck...
reconerator
Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...
MARCIM-WG: A Cyber Wargame Proposal Based on Math Modeling Applied in a Naval Scenario
As maritime operations increasingly depend on interconnected digital ecosystems, cyber incidents can propagate across maritime networks and degrade critical services. Strengthening strategic Cyber Situational Awareness CSA therefore requires training mechanisms that expose decision-makers to...
goTenna Pro 授权问题漏洞
goTenna Pro is a series of devices from goTenna that can create networks for off-grid communication and situational awareness. An authorization issue vulnerability exists in goTenna Pro that stems from not authenticating the public key, which allows an unauthenticated attacker to intercept and...
goTenna Pro 安全漏洞
The goTenna Pro is a series of devices from goTenna that can create networks for off-grid communications and situational awareness. The goTenna Pro has a security vulnerability that stems from not encrypting its user's call sign...
DeftTorero: tactics, techniques and procedures of intrusions revealed
Earlier this year, we started hunting for possible new DeftTorero aka Lebanese Cedar, Volatile Cedar artifacts. This threat actor is believed to originate from the Middle East and was publicly disclosed to the cybersecurity community as early as 2015. Notably, no other intelligence was shared unt...
AzureRT - A Powershell Module Implementing Various Azure Red Team Tactics
Powershell module implementing various cmdlets to interact with Azure and Azure AD from an offensive perspective. Helpful utilities dealing with access token based authentication, switching from Az to AzureAD and az cli interfaces, easy to use pre-made attacks such as Runbook-based command...
Octopus - Open Source Pre-Operation C2 Server Based On Python And Powershell
Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S. The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational arsenal and...
Oil/Gas Cybersecurity: Halt Critical Operation Attacks
Trend Micro has released a technical report on how the oil and gas industry can gain situational awareness across OT, IT and CT...
Utility Cybersecurity: Situational Awareness Cuts Risk
Trend Micro has released a technical report on how the electric utility industry can gain situational awareness across entire network...
CISA Releases Guidance on Protecting Organization-Run Social Media Accounts
CISA has released Capacity Enhancement Guide CEG: Social Media Account Protection, which details ways to protect the security of organization-run social media accounts. Malicious cyber actors that successfully compromise social media accounts—including accounts used by federal agencies—could spre...
Weak Password Vulnerability in the FLIR-AX8 from Phillips USA
Teledyne FLIR specializes in the design, development, production, marketing and promotion of specialized technologies for enhanced situational awareness. A weak password vulnerability exists in the FLIR-AX8 from Teledyne FLIR USA. An attacker can log in to the backend using the default weak...
Defeating the Pirates
In Akamai's paper, "Inside the World of Video Pirates," we discovered why digital intellectual property theft aka "piracy" is possibly the most misunderstood form of cybercrime facing the TV, sports, and film industries. The paper explored how piracy strategically impacts the industry, how the...
Lessons Learned from the Incident Response Trenches: Investigating and Eradicating Kwampirs
Kroll has deployed CB Response during hundreds of cyber investigations because it can provide insights throughout each stage of the incident response IR process see graphic. One of Kroll’s recent investigations, which involved the Kwampirs malware, illustrates how CB Response helps uncover critic...
Iron Rain: Gaining Situational Intelligence to Make Rapid Decisions
In our previous article we introduced the idea of cyber insurgency and irregular warfare. Building on effective techniques from the Marine Corps, we now want to discuss combating the threat. COUNTERINSURGENT FORCES MUST UNDERSTAND THE ENVIRONMENT As destructive attacks surge, integrity attacks...
Situational Awareness
A common step in the life-cycle of a red team engagement is to gather as much information is possible for the compromised environments and the domain network. This activity is often called situational awareness and there is no defined list of commands that a red teamer should execute. However all...
