An innovative SSH honeypot equipped with the XZ backdoor, identified by CVE-2024-3094.
Designed to bait and study potential attackers, this tool offers a unique glimpse into the tactics and techniques used by cyber adversaries.
By simulating vulnerabilities, it provides invaluable insights into securing networks against sophisticated threats.
PLEASE run this on a separate isolated system. Docker is not used for isolation, but for getting the libraries working.
The bpf hook alsoo prints EVERY call to execve, including ones outside the container.
Just run
docker compose upLogs are stored in ./logs/. The current monitoring includes bpftrace monitoring execve syscalls where the parent process is ‘sshd’, strace monitoring execve syscalls on the parent sshd process, tcpdump recording a pcap (TODO: rotate this) and sshd logging it’s regular output (TODO: patch something to log the RSA key).
Playwright-MCP (Model Context Protocol) is a cutting-edge tool designed to bridge the gap between AI…
JBDev is a specialized development tool designed to streamline the creation and debugging of jailbreak…
The Kereva LLM Code Scanner is an innovative static analysis tool tailored for Python applications…
Nuclei-Templates-Labs is a dynamic and comprehensive repository designed for security researchers, learners, and organizations to…
SSH-Stealer and RunAs-Stealer are malicious tools designed to stealthily harvest SSH credentials, enabling attackers to…
Control flow flattening is a common obfuscation technique used by OLLVM (Obfuscator-LLVM) to transform executable…