Threat research and reporting from IronNet's Threat Research Teams

Last update: Dec 02, 2022

Overview

IronNet Threat Research 🕵️

Overview

This repository contains IronNet's Threat Research.

Research & Reporting 📝

Project	Description
`Cobalt Strike`	Research and indicators for Cobalt Strike
`phishing`	Research and indicators related to phishing

Contributors 👥

IronNet's Threat Research Teams

Owner

GitHub Repository

Implementation of an attack on a tropical algebra discrete logarithm based protocol

Implementation of an attack on a tropical algebra discrete logarithm based protocol This code implements the attack detailed in the paper: On the trop

3 Dec 30, 2021

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading The script

187 Jan 03, 2023

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validatio

165 Dec 21, 2022

A Python r2pipe script to automatically create a Frida hook to intercept TLS traffic for Flutter based apps

boring-flutter A Python r2pipe script to automatically create a Frida hook to intercept TLS traffic for Flutter based apps. Currently only supporting

64 Oct 18, 2022

Compilation of resources and insights that helped me on my journey to data scientist

1.5k Jan 02, 2023

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

MurMurHash This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform. What is MurMurHash? Murm

87 Dec 31, 2022

Multi-Process Vulnerability Tool

1 Dec 22, 2021

Bypass's HCaptcha by overloading their api causing it to throwback a generated uuid. (Released due to exposure)

HCaptcha-Bypass Bypass's HCaptcha by overloading their api causing it to throwback a generated uuid. Not working? If it is not seeming to work for you

17 Aug 23, 2021

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228)

log4j-finder A Python3 script to scan the filesystem to find Log4j2 that is vulnerable to Log4Shell (CVE-2021-44228) It scans recursively both on disk

431 Dec 22, 2022

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

TProxer A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF. How • Install • Todo • Join Discord How it works

162 Nov 25, 2022

I hacked my own webcam from a Kali Linux VM in my local network, using Ettercap to do the MiTM ARP poisoning attack, sniffing with Wireshark, and using metasploit

plan I - Linux Fundamentals Les utilisateurs et les droits Installer des programmes avec apt-get Surveiller l'activité du système Exécuter des program

148 Dec 22, 2022

Threat research and reporting from IronNet's Threat Research Teams

Related tags

Overview

IronNet Threat Research 🕵️

Overview

Research & Reporting 📝

Contributors 👥

Owner

Implementation of an attack on a tropical algebra discrete logarithm based protocol

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

A Python r2pipe script to automatically create a Frida hook to intercept TLS traffic for Flutter based apps

Compilation of resources and insights that helped me on my journey to data scientist

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

Multi-Process Vulnerability Tool

Bypass's HCaptcha by overloading their api causing it to throwback a generated uuid. (Released due to exposure)

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228)

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

I hacked my own webcam from a Kali Linux VM in my local network, using Ettercap to do the MiTM ARP poisoning attack, sniffing with Wireshark, and using metasploit

Automatically fetch, measure, and merge subscription links on the network, use Github Action

Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10

OpenPort scanner GUI tool (CNMAP)

log4j2 dos exploit,CVE-2021-45105 exploit,Denial of Service poc

C++ fully undetected shellcode launcher

Rapidly enumerate subdomains and domains using rapiddns.io.

CVE-2022-21907 - Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

Fat-Stealer is a stealer that allows you to grab the Discord token from a user and open a backdoor in his machine.

This repo created for bypassing Widevine L3 DRM and obtaining keys.