snort3

Snort++ Snort 3 is the next generation Snort IPS Intrusion Prevention System. This file will show you what Snort++ has to offer and guide you through the steps from download to demo. If you are unfamiliar with Snort you should take a look at the Snort documentation first. We will cover the...

Re2Pcap

Re2Pcap: Crea archivos PCAP a partir de peticiones o respuestas HTTP sin procesar en segundos Re2Pcap es la abreviatura de Request2Pcap y Response2Pcap. Los usuarios de la comunidad pueden crear rápidamente un archivo PCAP usando Re2Pcap y probarlos contra las reglas de Snort. Re2Pcap te permite...

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

topera

Topera project page You can see more extensive reference of Topera at our web page at github: Topera project page What's Topera? Topera is a new security tools for IPv6, with the particularity that their attacks can't be detected by Snort. Snort is the most known IDS/IPS and is widely used in man...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs Las IPs de origen intentan ataques usando Apache Log4j RCE, e incluyen una gran proporción de nodos Tor. Para más detalles, consulte Attack-IP.md Para los IOCs de malware, botnets, etc., propagados mediante la vulnerabilidad log4j, consulte IOC-C2.md...

threat-intel

threat-intel このリポジトリには、Volexityの公開脅威インテリジェンスブログ記事に関連するIoCが含まれています。 これらのIoCに関連する公開ブログ記事は、VolexityのWebサイトで見つけることができます。 以前はこのリポジトリは、Volexityが公開したツールを保存するためにも使用されていました。これらのツールは現在、各ツール専用のリポジトリに移動されており、Volexity GitHubページで見つけることができます。 IOCs これらは年ごとに整理されており、各年の中の各フォルダは特定の記事に対応しています。...

pulledpork

PulledPork Snort 및 Suricata 규칙 관리를 위한 PulledPork Google 코드에서 Libera.ChatIRC에서 우리를 찾아보세요 pulledpork 저작권 C 2009-2021 JJ Cummings, Michael Shirk 및 PulledPork 팀! PulledPork를 선택해 주셔서 감사합니다! 이 파일은 PulledPork 사용에 대한 기본적인 지침을 제공합니다. 놓치는 부분이 없도록 이 파일을 철저히 읽어 주시기 바랍니다. 기능 및 특징 모든 snort 규칙 세트의 자동 다운로드, 파싱, ...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

cve-2021-44228

CVE-2021-44228 https://nvd.nist.gov/vuln/detail/CVE-2021-44228 log4j.java - modification of this PoC https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce to run a bunch of payloads from JNDIExploit. jndi.pcap - a PCAP of each of these payloads being ran. snort.rules - Snort rules to...

IP-reputation-snort-rule-generator

IP-reputation-snort-rule-generator 공개 IP/도메인 평판 데이터를 기반으로 Snort 규칙 또는 Cisco IDS 시그니처를 생성하는 도구 NCC Group Plc가 오픈소스로 공개 - http://www.nccgroup.com/ 개발자: Will Alexander, will dot alexander at nccgroup dot com https://github.com/nccgroup/IP-reputation-snort-rule-generator AGPL 라이선스로 배포됩니다. 자세한 내용은...

heyserial

HEY SERIAL! Autor: Alyssa Rahman @ramen0x3f Creado: 2021-10-27 Última actualización: 2021-12-02 Blog: https://www.mandiant.com/resources/hunting-deserialization-exploits Para más detalles sobre esta herramienta y el proceso de investigación detrás de ella, consulta nuestro blog. Descripción Crea...

qub-network-security-cve-2023-20198

🛡️ qub-network-security-cve-2023-20198 Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE 📘 Queen’s University Belfast – CSC3064 Network Security Assessment 📋 Assessment Overview This project involves analyzing PCAP files provided by Fox-IT to: Identify Indicators o...

network-security-snort

Snort IDS/IPS Deployment Lab A full-cycle deployment of Snort 3 as both an Intrusion Detection System passive monitoring and an Intrusion Prevention System active blocking via iptables, validated against four attack vectors across a three-machine virtual network on Kali Linux. The lab proves the...

activemq-ids-ips-lab

IDS/IPS 랩 - Apache ActiveMQ를 RCE 공격으로부터 보호하기 이 프로젝트는 통제된 랩 환경에서 IDS 및 IPS 메커니즘이 Apache ActiveMQ 취약점 CVE-2023-46604의 악용을 어떻게 탐지하고 방지할 수 있는지 평가합니다. 프로젝트 개요 이 랩은 현실적인 공격-방어 워크플로를 시뮬레이션하기 위해 공격자, 게이트웨이, 피해자 시스템을 분리하여 설계되었습니다. 이 프로젝트에는 취약점 발견, 수동 검증, 악용, 완화가 포함됩니다. 수행 작업 랩 환경 구축 및 테스트 GVM 및 Nmap을 사용한 ...

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

PT-2026-73234

Name of the Vulnerable Software and Affected Versions pfSense Plus versions prior to 26.07 Description The wg4 driver fails to verify if the MAC verification step succeeded after receiving a decryption result from OCF. This allows the driver to silently accept packets containing an invalid Poly13...

Suricata IDPE 8.0.6

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...

TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed eight vulnerabilities in TP-Link, and one each in Adobe Photoshop, OpenVPN, and Gen Digital's Norton VPN. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco 's...

Suricata IDPE 8.0.5

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...