Hacking Articles Tips Tricks Videos Tutorials

Deepfence PacketStreamer is a high-performance remote packet capture (https://www.kitploit.com/search/label/Packet%20Capture) and collection tool. It is used by Deepfence's ThreatStryker (https://deepfence.io/threatstryker/) security observability (https://www.kitploit.com/search/label/Observability) platform to gather network traffic on demand from cloud workloads for forensic analysis. Primary design goals: Stay light, capture and stream, no additional processing Portability, works across virtual machines, Kubernetes and AWS Fargate. Linux and Windows PacketStreamer sensors are started on the target servers. Sensors capture traffic, apply filters, and then stream the traffic to a central reciever. Traffic streams may be compressed and/or encrypted using TLS. The PacketStreamer receiver accepts PacketStreamer streams from multiple remote sensors, and writes the packets to a local pcap capture file ⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐ (9)">

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

4 viewsedited 13:07

4 views13:07

Hacking Articles Tips Tricks Videos Tutorials

PacketStreamer sensors collect raw network packets on remote hosts. It selects packets to capture using a BPF filter, and forwards them to a central reciever process where they are written in pcap format. Sensors are very lightweight and impose little performance (https://www.kitploit.com/search/label/Performance) impact on the remote hosts. PacketStreamer sensors can be run on bare-metal servers, on Docker hosts, and on Kubernetes nodes. The PacketStreamer receiver accepts network traffic from multiple sensors, collecting it into a single, central pcap file. You can then process the pcap file or live feed the traffic to the tooling of your choice, such as Zeek, Wireshark Suricata, or as a live stream for Machine Learning (https://www.kitploit.com/search/label/Machine%20Learning) models. When to use PacketStreamer PacketStreamer meets more general use cases than existing alternatives. For example, PacketBeat (https://github.com/elastic/beats/tree/master/packetbeat) captures and parses the packets on multiple remote hosts, assembles transactions, and ships the processed data to a central ElasticSearch collector. ksniff (https://github.com/eldadru/ksniff) captures raw packet data from a single Kubernetes pod. Use PacketStreamer if you need a lightweight, efficient method to collect raw network data from multiple machines for central logging and analysis. Quick Start For full instructions, refer to the PacketStreamer Documentation (https://deepfence.github.io/PacketStreamer/). You will need to install the golang toolchain and libpcap-dev before building PacketStreamer. # Pre-requisites (Ubuntu): sudo apt install golang-go libpcap-dev
git clone https://github.com/deepfence/PacketStreamer.git
cd PacketStreamer/
make Run a PacketStreamer receiver, listening on port 8081 and writing pcap output to /tmp/dump_file (see receiver.yaml (https://github.com/deepfence/PacketStreamer/blob/main/contrib/config/receiver.yaml)): ./packetstreamer receiver --config ./contrib/config/receiver.yaml Run one or more PacketStreamer sensors on local and remote hosts. Edit the server address in sensor.yaml (https://github.com/deepfence/PacketStreamer/blob/main/contrib/config/sensor-local.yaml): # run on the target hosts to capture and forward traffic

# copy and edit the sample sensor-local.yaml file, and add the address of the receiver host
cp ./contrib/config/sensor-local.yaml ./contrib/config/sensor.yaml

./packetstreamer sensor --config ./contrib/config/sensor.yaml Who uses PacketStreamer? Deepfence ThreatStryker (https://deepfence.io/threatstryker/) uses PacketStreamer to capture traffic (https://www.kitploit.com/search/label/Capture%20Traffic) from production platforms for forensics and anomaly detection. Get in touch Thank you for using PacketStreamer. Start with the documentation Got a question, need some help? Find the Deepfence team on Slack Got a feature request or found a bug? Raise an issue productsecurity at deepfence dot io: Found a security issue? Share it in confidence Find out more at deepfence.io (https://deepfence.io/) Security and Support For any security-related issues in the PacketStreamer project, contact productsecurity at deepfence dot io. Please file GitHub issues as needed, and join the Deepfence Community Slack channel (https://join.slack.com/t/deepfence-community/shared_invite/zt-podmzle9-5X~qYx8wMaLt9bGWwkSdgQ). License The Deepfence PacketStreamer project (this repository) is offered under the Apache2 license (https://www.apache.org/licenses/LICENSE-2.0). Contributions (https://github.com/deepfence/PacketStreamer/blob/main/CONTRIBUTING.md) to Deepfence PacketStreamer project are similarly accepted under the Apache2 license, as per GitHub's inbound=outbound policy (https://docs.github.com/en/github/site-policy/github-terms-of-service#6-contributions-under-repository-license).

Download PacketStreamer (https://github.com/deepfence/PacketStreamer)

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

7 viewsedited 13:07

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Design Weakness Discovered in Apple M1 Kernel Protections

The proof-of-concept attack from MIT CSAIL researchers undermines the pointer authentication feature used to defend the Apple chip's OS kernel.

7 views14:16

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
How 4 Young Musicians Hacked Sheet Music to Help Fight the Cold War

In 1985, a group of klezmer musicians from the US rendezvoused with underground dissidents in Tbilisi, Georgia. This is the story of how they pulled it off with homebrew cryptography.

5 views14:17

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Artificial Intelligence and Security: What You Should Know

Next-generation AI products learn proactively and identify changes in the networks, users, and databases using "data drift" to adapt to specific threats as they evolve.

5 views14:17

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
In a Quickly Evolving Landscape, CISOs Shift Their 2022 Priorities

Cloud migration, DevSecOps, cyber insurance, and more have emerged as important motivators for cybersecurity investment and focus.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

In a Quickly Evolving Landscape, CISOs Shift Their 2022 Priorities

Cloud migration, DevSecOps, cyber insurance, and more have emerged as important motivators for cybersecurity investment and focus.

8 viewsedited 14:17

Hacking Articles Tips Tricks Videos Tutorials

10 views14:49

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Researchers find eight CVEs in single building access system

https://cdn-images-1.medium.com/max/1200/0*D-fQUJYY1m7xrBmA.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Researchers find eight CVEs in single building access system

A series of eight newly designated common vulnerabilities and exposures (CVEs) in a building access control system built by HID Mercury and sold by Carrier — a global supplier of building systems for…