SIEM – Security Information and Event Management Tools – A Beginner’s Guide

0
SIEM Guide

What is a SIEM? SIEM, when expanded, becomes Security Information Event Management. As its name suggests,  the primary function of a SIEM is Event management. The SIEM solution, once implemented completely & effectively, will have complete visibility over an organization’s network. This helps administrators and SIEM operators to monitor network activity in their infrastructure. But interestingly, one can categorize various assets(network...

R4Ven : Track IP And GPS Location

0

Track User's Smartphone/Pc Ip And Gps Location. The tool hosts a fake website which uses an iframe to display a legit website and, if the target allows it, it will fetch the Gps location (latitude and longitude) of the target along with IP Address and Device Information. This tool is a Proof of Concept and is for Educational Purposes Only. Using this...

Klyda : Highly Configurable Script For Dictionary/Spray Attacks Against Online Web Applications

0

The Klyda project has been created to aid in quick credential based attacks against online web applications. Klyda supports the use from simple password sprays, to large multithreaded dictionary attacks. Klyda is a new project, and I am looking for any contributions. Any help is very appreciated.Klyda offers simple, easy to remember usage; however, still offers configurability for your needs: Mulithreaded...

Pylirt : Python Linux Incident Response Toolkit

0

Pylirt application, it is aimed to accelerate the incident response processes by collecting information in Linux operating systems. Features Information is collected in the following contents. /etc/passwd cat /etc/group cat /etc/sudoers lastlog cat /var/log/auth.log uptime/proc/meminfo ps aux /etc/resolv.conf /etc/hosts iptables -L -v -n find / -type f -size +512k -exec ls -lh {}/; find / -mtime -1 -ls ip a netstat -nap arp -a echo $PATH Installation git clone https://github.com/anil-yelken/pylirtcd pylirtsudo pip3 install paramiko Usage The following information should be specified...

Scscanner : Tool To Read Website Status Code Response From The Lists

0

Scscanner is tool to read website status code response from the lists. This tool have ability to filter only spesific status code, and save the result to a file. Feature Slight dependency. This tool only need curl to be installed Multi-processing. Scanning will be more faster with multi-processing Filter status code. If you want only spesific status code (ex: 200) from the list,...

Neton : A Sandbox Information Gathering Tool

0

Neton is a tool for getting information from Internet connected sandboxes. It is composed by an agent and a web interface that displays the collected information.The Neton agent gets information from the systems on which it runs and exfiltrates it via HTTPS to the web server. Some of the information it collects: Operating system and hardware information Find files on mounted drives List...

4 Next-Generation Security Technologies: SCA, XDR, SAST, and eBPF

0
Next-Generation Security Technologies

What Are Next-Gen Security Technologies? As businesses increasingly rely on remote access and distributed computing resources, their threat landscape grows. Advances in technology introduce new threats and vulnerabilities that are often invisible to traditional cybersecurity tools. In addition, traditional security tools often generate a large number of alerts, many of which are false positives, creating a burden for IT and...

Shells : Little Script For Generating Revshells

0

Shells is a script for generating common revshells fast and easy. Especially nice when in need of PowerShell and Python revshells, which can be a PITA getting correctly formatted. PowerShell revshells Shows username@computer, above the prompt and working-directory Has a partial AMSI-bypass, making some stuff a bit easier TCP and UDP Windows Powershell and Core Powershell Functions for uploading and downloading files. (Using Updog by...

Pywirt : Python Windows Incident Response Toolkit

0

Pywirt application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via winrm. Features Information is collected in the following contents. IP Configuration Users Groups Tasks Services Task Scheduler Registry Control Active TCP & UDP ports File sharing Files Firewall Config Sessions with other Systems Open Sessions Log Entries Installation git clone https://github.com/anil-yelken/pywirtcd pywirtpip3 install pywinrm Usage The following information should be specified in the cred_list.txt file: IP|Username|Password Click Here To Download

DomainDouche – OSINT Tool to Abuse SecurityTrails Domain

0

DomainDouche is a abusing securitytrails domain suggestion API to find potentially related domains by keyword and brute force. Demo Usage usage: domaindouche.py -c COOKIE -a USER_AGENT keyword Abuses SecurityTrails API to find related domains by keyword. Go to https://securitytrails.com/dns-trails, solve any CAPTCHA you might encounter, copy the raw value of your Cookie and User-Agent headers and use them with the -c...