169 matches found
Log4Shell_CVE-2021-44228_related_attacks_IOCs
Log4Shell（CVE-2021-44228）related attacks IOCs 源IP使用Apache Log4j RCE尝试攻击，其中包含很大部分Tor节点，详见Attack-IP.md 利用log4j漏洞传播的恶意程序、Botnet等IOC详见IOC-C2.md Snort检测规则详见Snort.md Suricata规则详见Suricata.md...
Re2Pcap
Re2Pcap: 在数秒内从原始HTTP请求或响应创建PCAP文件 Re2Pcap 是 Request2Pcap 和 Response2Pcap 的缩写。社区用户可以使用 Re2Pcap 快速创建 PCAP 文件，并针对 Snort 规则进行测试。 Re2Pcap 允许你快速为如下所示的原始HTTP请求创建 PCAP 文件： root@kitploit: POST /admin/tools/iplogging.cgi HTTP/1.1 Host: 192.168.13.31:80 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0...
IP-reputation-snort-rule-generator
IP-reputation-snort-rule-generator Una herramienta para generar reglas de Snort o firmas IDS de Cisco basadas en datos públicos de reputación de IP/dominio Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Will Alexander, will punto alexander arroba...
threat-intel
threat-intel Este repositorio contiene IoC relacionados con las publicaciones públicas de inteligencia de amenazas de Volexity. Las publicaciones de blog públicas relacionadas con estos IoC se pueden encontrar en el sitio web de Volexity. En el pasado, este repositorio también se utilizaba para...
heyserial
مرحبًا سيريال! المؤلف: أليسا رحمان @ramen0x3f تاريخ الإنشاء: 2021-10-27 آخر تحديث: 2021-12-02 المدونة: https://www.mandiant.com/resources/hunting-deserialization-exploits لمزيد من التفاصيل حول هذه الأداة وعملية البحث وراءها، اطّلع على مدونتنا. الوصف أنشئ قواعد صيد لاستغلال إلغاء التسلسل برمجيًا...
Suricata IDPE 8.0.5
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
Suricata IDPE 8.0.4
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
CVE-2026-20007
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
CVE-2026-20007
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
CVE-2026-20007
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
CVE-2026-20007 Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
PT-2026-23010
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...
PT-2026-7483
Heads up, folks: Microsoft's February 2026 Patch Tuesday is out, dropping 55 vulnerability fixes across various products. Among these is CVE-2025-59498, which Microsoft has explicitly marked as Critical. This update is significant, addressing a broad spectrum of security issues. While the specifi...
Suricata IDPE 8.0.3
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell 핵심 패키지 📦 포함 파일 1. 취약한 Do...
EUVD-2021-27303
Malware in sbrugna...
EUVD-2016-2562
Malware in sbrugna...
Nvidia and Adobe vulnerabilities
Cisco Talos' Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Nvidia and one in Adobe Acrobat. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's third-party vulnerability disclosure policy...
Suricata IDPE 7.0.12
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...
Suricata IDPE 7.0.11
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and...