cve-2018-4013

cve-2018-4013 cve-2018-4013 poc 간단한 재현 참고 TALOS-2018-0684 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence TODO : exploit...

CVE-2018-7845

CVE-2018-7845 영향을 받는 제품 Schneider Electric Modicon M580 버전 2.80 Schneider Electric Modicon M340 버전 3.01 Schneider Electric Modicon Premium 버전 3.20 Schneider Electric Modicon Quantum 버전 3.60 참고 자료 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

IOCs

////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // ///////////////////////// ///////////////////////...

talos

채팅 · 토론 · 뉴스레터 · 문서 · Ory Network 사용해보기 · 채용 Ory Talos는 저지연 검증, 수평적 확장, 예측 가능한 운영에 최적화된 확장 가능하고 안전한 API 키 서버입니다. 확립된 보안 모범 사례를 따라 고처리량 시스템을 위한 API 키를 발급, 검증, 폐기, 파생하며 단기 토큰도 관리합니다. Ory Talos란 무엇인가? 왜 Ory Talos인가 배포 옵션 Ory Network에서 Ory Talos 사용 Ory Talos 자체 호스팅 빠른 시작 Ory Talos를 사용하는 곳 생태계 Ory...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

The Fine Art of Frustrating the Adversary

For Cybersecurity Awareness Month, eight Cisco Talos researchers share practical ways defenders can frustrate adversaries at different stages of an operation. Deception techniques such as honeypot accounts, false infrastructure, and tarpits can slow adversaries down while giving defenders earlier...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

clamav

ClamAV ClamAV®는 트로이 목마, 바이러스, 멀웨어 및 기타 악성 위협을 탐지하는 오픈소스 안티바이러스 엔진입니다. 문서 및 FAQ ClamAV 문서는 docs.clamav.net에서 호스팅됩니다. 각 릴리스의 소스 아카이브에는 오프라인 읽기를 위한 문서 사본도 포함되어 있습니다. Cisco-Talos/clamav-documentation에 개선 사항을 제출하여 문서에 기여할 수 있습니다. ClamAV 뉴스 이번 릴리스 및 이전 릴리스의 기능에 대한 정보는 뉴스를 읽어보세요. 블로그를 읽고 Twitter @clamav...

mutiny-fuzzer

Быстрый старт: учебник по Mutiny Статья в блоге: http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html Ссылки на демонстрационное видео на YouTube: https://www.youtube.com/watch?v=FZyR6MgJCUs Для дополнительных функций, ориентированных на кампании фаззинга/обратную...

CVE-2017-4878-Samples

CVE-2017-4878 샘플 CVE-2017-4878 샘플 - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Flash 익스플로잇 fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 - https://www.virustotal.com/en/file/fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0/analysis/...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

CVE-2018-7849

CVE-2018-7849 영향을 받는 제품 Schneider Electric Modicon M580 버전 2.90 Schneider Electric Modicon M340 버전 3.10 Schneider Electric Modicon Premium 모든 버전 Schneider Electric Modicon Quantum 모든 버전 참고 자료 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7854

CVE-2018-7854 영향받는 제품 Schneider Electric Modicon M580 버전 2.90 Schneider Electric Modicon M340 버전 3.10 참고 자료 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 사용법 python CVE-2018-7854.py --host 192.168.1.123...

remcos-decoder

Remcos RAT 버전 2.0.5 및 이전 버전용 Talos Decryptor POC 도움말은 ./remcosdecryptor.py -h를 확인하세요. 면책 조항: 이 도구에는 어떠한 보증도 제공되지 않습니다. 사용에 따른 책임은 본인에게 있습니다...

EUVD-2026-62955

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

EUVD-2026-62954

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

CVE-2026-76390

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...