Уязвимость в cgroups v1, позволяющая выйти из изолированного контейнера
Раскрыты детали уязвимости (CVE-2022-0492) в реализации механизма ограничения ресурсов cgroups v1 в ядре Linux, которая может использоваться для выхода из изолированных контейнеров. Проблема проявляется начиная с ядра Linux 2.6.24 и устранена в выпусках ядра 5.16.12, 5.15.26, 5.10.97, 5.4.177, 4.19.229, 4.14.266 и 4.9.301. Проследить за публикаций обновления пакетов в дистрибутивах можно на данных страницах: Debian, SUSE, Ubuntu, RHEL, Fedora, Gentoo, Arch Linux.

​Incident-Playbook

Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques

https://github.com/austinsonger/Incident-Playbook

#blueteam #techniques #cybersecurity #infosec #infosecurity

Немного разьяснялок о "поломанном доступе" из списка Owasp Top10

https://habr.com/ru/post/654769/

#web

watchdog - крутая библиотека для мониторинга событий файловой системы.
Например, можно отслеживать событие изменения/создания файла и что-то потом делать.
Принцип примерно тот же, что и у аналогичной библиотеки для NodeJS.

Ставится командой pip install watchdog
Документация и примеры кода здесь.

Silejonu/bash_loading_animations
Ready-to-use loading animations in ASCII and UTF-8 for easy integration into your Bash scripts.
Language: Shell
#animation #ascii #bash #collection #loading_animation #loading_indicator #loading_spinner #script #template
Stars: 117 Issues: 0 Forks: 10
https://github.com/Silejonu/bash_loading_animations

HowToHunt

rials and Things to Do while Hunting Vulnerability.

https://github.com/KathanP19/HowToHunt

#xss #sqli #idor #ssrf #leaks

​DeTTECT

Detect Tactics, Techniques & Combat Threats

https://github.com/rabobank-cdc/DeTTECT

#blueteam #techniques #cybersecurity #infosec #infosecurity

FastFuzz Chrome Extension

Fast fuzzing websites with chrome extension.

@HackGit

https://github.com/tismayil/fastfuz-chrome-ext

#cybersecurity #infosec #infosecurity #pentesting #bugbounty

​Narthex

Modular personalized dictionary generator.

It contains autonomous Unix-style programs for the creation of personalised dictionaries that can be used for password recovery & security assessment.

https://github.com/MichaelDim02/Narthex

#cybersecurity #infosec #infosecurity #pentesting

systemd-homed - service providing portable human-user accounts that are not dependent on current system configuration

https://wiki.archlinux.org/title/Systemd-homed

antfu/vscode-settings
My VS Code settings and extensions
#vscode #vscode_extension #vscode_settings #vscode_settings_json
Stars: 233 Issues: 1 Forks: 16
https://github.com/antfu/vscode-settings

​Hayabus

Windows event log fast forensics timeline generator and threat hunting tool

Features:
1. Cross-platform support: Windows, Linux, macOS
2. Developed in Rust to be memory safe and faster than a hayabusa falcon!
3. Multi-thread support delivering up to a 5x speed improvement!
4. Creates a single easy-to-analyze CSV timeline for forensic investigations and incident response
5. Threat hunting based on IoC signatures written in easy to read/create/edit YML based hayabusa rules
6. Sigma rule support to convert sigma rules to hayabusa rules
7. Currently it supports the most sigma rules compared to other similar tools and even supports count rules
8. Event log statistics (Useful for getting a picture of what types of events there are and for tuning your log settings)
9. Rule tuning configuration by excluding unneeded or noisy rules
10. MITRE ATT&CK mapping

https://github.com/Yamato-Security/hayabusa