soc-automation-lab

SOC Automation Lab This repository documents the design, detection logic, automation workflows, and lessons learned from building an automated SOC demo using open-source tools. The project focuses on how alerts move from detection to investigation and notification , and what breaks along the way...

CVE-2007-2447-Exploitation-SIEM-Detection-Lab

🛡️ CVE-2007-2447 Exploitation & SIEM Detection Lab Wazuh + MITRE ATT&CK B.Tech Project BTP | IIIT Pune Based on: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi A fully functional cybersecurity home lab built on a single machin...

CVE-2024-4577-rayng

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A complete detection engineering lab for CVE-2024-4577 PHP CGI Argument Injection. Includes pre-built Vagrant boxes, Wazuh SIEM rules, and exploit tools for Blue Team training. What's Included Windows Server 2022 VM - Vulnerable XAMPP +...

cybersecurity_portfolio

Portafolio. Gleb Usoltsev Estudiante de segundo año, Instituto de Ciencias de la Computación y Ciberseguridad, Universidad Politécnica de San Petersburgo Pedro el Grande, especialidad 10.03.01 «Seguridad de la información». Como parte de la práctica educativa de iniciación en Positive Technologie...

wazuh-home-soc

SOC en casa: Laboratorio de detección de amenazas con Wazuh + Suricata Un laboratorio de Centro de Operaciones de Seguridad autogestionado, diseñado para detectar técnicas de ataque reales contra un objetivo deliberadamente vulnerable, usando Wazuh como SIEM y Suricata como sensor IDS basado en...

Mobile-Drop-Device-SOC-Detection

🛡️ Project Phantom: Mobile "Drop Device" SOC Detection Simulation This project demonstrates an end-to-end SOC laboratory workshop simulating how an unauthorized, root-less Android device Casper Via S, used as a "Drop Device" within an internal network, is detected via Wazuh SIEM when launching...

cybersecurity-home-lab-btp

🛡️ Laboratorio Domestico di Cybersecurity — Rilevamento e Monitoraggio B.Tech Project BTP | IIIT Pune Basato su: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi Un laboratorio domestico di cybersecurity completamente funzionant...

EUVD-2024-53574

Malicious code in bioql PyPI...

CVE-2024-57378

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources...

CVE-2024-57378

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources...

CVE-2024-57378: Improper Access Control

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources...

CVE-2024-57378

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources...

CVE-2024-57378

Wazuh SIEM version 4.8.2 is impacted by a broken access control vulnerability within the Internal Users module . This flaw allows an attacker to bypass security restrictions and create internal users without assigning any existing roles, which can lead to privilege escalation or unauthorized acce...

CVE-2024-57378

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources...

PT-2025-6749 · Wazuh · Wazuh Siem

Name of the Vulnerable Software and Affected Versions: Wazuh SIEM version 4.8.2 Description: This issue is related to a broken access control vulnerability, allowing the unauthorized creation of internal users without assigning any existing user role. This could potentially lead to privilege...