DATA

DATA: Credential Phish Analysis and Automation Slides from presentation at CircleCityCon 2017 Tested on Headless Ubuntu Server 16.04 BUCKLEGRIPPER py Given a suspected phishing url or file of line separated urls, visit, screenshot, and scrape for interesting files. Requirements can be installed b...

Zeus-Scanner

유용한 링크 목록 Zeus란 무엇인가 Zeus의 특징 요구 사항 및 설치 Ubuntu/Debian centOS 기타 스크린샷 데모 비디오 사용 설명서 Zeus 작동 방식 기능 Zeus와 함께 sqlmap에 플래그 전달 법적 정보 라이선스 GPL 행동 강령 버그 신고 풀 리퀘스트 열기 기여 지침 Zeus에 기부 감사 인사 Zeus-Scanner Zeus란 무엇인가? Zeus는 웹 애플리케이션 정찰을 간단하게 만들기 위해 설계된 고급 정찰 유틸리티입니다. Zeus에는 강력한 내장 URL 파서 엔진, 다중 검색 엔진 호환성, URL...

hoper

Hoper 지정한 URL이 최종 지점에 도달하기까지의 모든 홉hop을 보여줍니다. 예를 들어 이메일 URL이나 URL 단축 서비스의 전체 경로를 확인하려는 경우, Hoper는 모든 URL 리디렉션을 반환합니다. 설치 root@kitploit: $ gem install hoper 사용법 명령줄에 입력하세요: root@kitploit: $ hoper url 개발 저장소를 체크아웃한 후, bin/setup을 실행하여 의존성을 설치하세요. 또한 bin/console을 실행하면 실험해볼 수 있는 대화형 프롬프트를 사용할 수 있습니다. ...

TekDefense-Automater

TekDefense-Automater バージョン: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html...

3 SOC Process Fixes That Unlock Tier 1 Productivity

What is really slowing Tier 1 down: the threat itself or the process around it? In many SOCs, the biggest delays do not come from the threat alone. They come from fragmented workflows, manual triage steps, and limited visibility early in the investigation. Fixing those process gaps can help Tier ...

Phishing Detection System: An Ensemble Approach Using Character-Level CNN and Feature Engineering

In actuality, phishing attacks remain one of the most prevalent cybersecurity risks in existence today, with malevolent actors constantly changing their strategies to successfully trick users. This paper presents an AI model for a phishing detection system that uses an ensemble approach to combin...

Dual-Path Phishing Detection: Integrating Transformer-Based NLP with Structural URL Analysis

Phishing emails pose a persistent and increasingly sophisticated threat, undermining email security through deceptive tactics designed to exploit both semantic and structural vulnerabilities. Traditional detection methods, often based on isolated analysis of email content or embedded URLs, fail t...

Client-Side Zero-Shot LLM Inference for Comprehensive In-Browser URL Analysis

Malicious websites and phishing URLs pose an ever-increasing cybersecurity risk, with phishing attacks growing by 40% in a single year. Traditional detection approaches rely on machine learning classifiers or rule-based scanners operating in the cloud, but these face significant challenges in...

MultiPhishGuard: an LLM-Based Multi-Agent System for Phishing Email Detection

Phishing email detection faces critical challenges from evolving adversarial tactics and heterogeneous attack patterns. Traditional detection methods, such as rule-based filters and denylists, often struggle to keep pace with these evolving tactics, leading to false negatives and compromised...

The vulnerability of the UriComponentsBuilder component in the Spring Framework’s URL analysis mechanism allows attackers to perform SSRF attacks.

The vulnerability of the UriComponentsBuilder component in the Spring Framework’s URL analysis module exists due to insufficient validation of data entered by users. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

Watch out for the email that says “You have a new voicemail!”

A phishing campaign is using voicemail notification messages to go after victims Office 365 credentials. According to researchers at ZScaler, the campaign uses spoofed emails with an HTML attachment that contains encoded javascript. The email claims that you have a new voicemail and that you can...

The vulnerability of the Firefox browser, which allows a violator to obtain confidential information

The vulnerability of the Firefox browser’s URL analysis process is related to the improper recognition of escaped characters in host names within the Location header. Exploiting this vulnerability can allow a malicious actor to access protected information by redirecting users to another website...

[Automater 1.2] IP and URL Analysis Tool

Automater is a IP and URL Analysis tool we created to help automate the analysis process. You can see a video of Automater in action in TekTip episode 15. Download Automater 1.2...

Дырка в Netscape SmartDownload (buffer overflow)

Переполнение буфера при анализе URL...