読者です 読者をやめる 読者になる 読者になる

不正アクセス

No 日付 タイトル 84 2017/03/22 「おかやまオープンデータカタログ」サイトの不正アクセスによる公開停止について 83 2017/03/02 米ヤフー、不正アクセス被害は3200万件--偽造クッキーでログイン 82 2017/02/23 美作市サーバーに不正アクセス 海外から4千…

サイバー攻撃

No 日付 タイトル 42 2017/03/14 空港ウェブサイト改ざん、15歳のハッカー2人を特定 41 2017/03/11 ウェブサイトにサイバー攻撃=2万6千件のアドレス消失-ジェトロ 40 2017/01/02 大陽日酸にサイバー攻撃 内部情報流出か 39 2016/12/31 米電力会社にサイ…

情報漏洩

No 日付 タイトル 122 2017/3/16 不正アクセスで顧客クレカ情報が窃取被害 - 家電通販サイト 121 2017/3/16 沖縄電力のStruts2稼動サイトに不正アクセス、約6500件のメールアドレス流出か 120 2017/3/14 ヤマサちくわ、不正アクセスで情報流出 9426人分 …

BlackList Site

ブラックリスト サイト タイトル URL C CLEAN MX realtime database http://support.clean-mx.de/clean-mx/viruses F firehol http://iplists.firehol.org/ H hpHosts https://hosts-file.net/ HetrixTools https://hetrixtools.com/blacklist-check/ M Malc…

Reputation service list

レピュテーション サービス タイトル URL B BrightCloud URL/IP Lookup http://www.brightcloud.com/tools/url-ip-lookup.php C Comodo Web Inspector http://app.webinspector.com/ Cisco SenderBase http://www.senderbase.org/ Barracuda Reputation http…

impfuzzy

sec

Import APIとFuzzy Hashingでマルウエアを分類する ~impfuzzy~ https://www.jpcert.or.jp/magazine/acreport-impfuzzy.html ■インストール sudo apt-get install python-dev libfuzzy-dev sudo pip install pefile sudo apt-get install ssdeep git clone …

Hyper-V Volatility

» Analyzing Hyper-V Saved State files in Volatility technet.microsoft.com

pstirparo/mac4n6

Collection of forensics artifacs location for Mac OS X and iOS github.com

php-malware-finder

github.

memory forensics

Volatility Foundation Rekall Memory Forensic Framework Invtero.net by ShaneK2

Microsoftのコードエディタ「Visual Studio Code

Microsoftのコードエディタ「Visual Studio Code」β版でオープンソース化、拡張機能で「Go」など約60言語に対応 gigazine.net

rekall-memory-forensics-cheatsheet.pdf

http://digital-forensics.sans.org/media/rekall-memory-forensics-cheatsheet.pdf

Phantom

Threat Analysis: Poison Ivy and Links to an Extended PlugX Campaign – CYINT Analysis

Shifu

Deobfuscating Shifu Shifu Malware Analyzed: Behavior, Capabilities and Communications - iSIGHT Partners

ioc-parser

Tool to extract indicators of compromise from security reports in PDF format https://github.com/armbues/ioc-parser $ ./ioc-parser.py -i pdf -o yara waterbug-attack-group.pdf rule waterbug_attack_group { strings: $Filename1 = "NDProxy.sys" …

Bitnami Redmine と Backlogs

以下のサイトを参考にしてインストールした。 http://qiita.com/tkeydll/items/eef45760905f7a5f9908

[task] redmine インストール

$ sudo apt-get update $ sudo apt-get install git $ sudo apt-get install subversion $ sudo apt-get install ruby $ sudo apt-get install jruby $ sudo apt-get install ruby-dev $ sudo apt-get install ImageMagick $ sudo apt-get install libmagick…

[KANBAN] taiga

$ git clone https://github.com/taigaio/taiga-scripts.git $ cd taiga-scripts $ cd scripts $ vi setup-postgresql.sh変更前 postgresql-9.3 postgresql-contrib-9.3 \ postgresql-doc-9.3 postgresql-server-dev-9.3 変更後 postgresql postgresql-contr…

[KANBAN] kanban-listのインストール

git clone https://github.com/volpe28v/kanban-list sudo apt-get install bundler sudo apt-get install libpq-dev sudo gem install pg sudo apt-get install libsqlite3-dev sudo gem install sqlite3 bundle rake db:migrate rails s

AIL framework - Analysis Information Leak framework

sec

https://github.com/CIRCL/AIL-framework 別途「google snappy」をインストール https://code.google.com/p/snappy/

pystemon インストール

sec

sudo apt-get install python-pip sudo pip install PyYAML sudo pip install BeautifulSoup git clone https://github.com/cvandeplas/pystemon

[malware] Viper

sec

マルウェア管理、解析フレームワーク http://viper-framework.readthedocs.org/en/latest/index.html Viper is a binary analysis and management framework. sudo apt-get install gcc python-dev python-pip sudo pip install SQLAlchemy PrettyTable pyth…

nginx,elasticsearch,kibanaインストール

============================================================== nginxのインストール #vi /etc/yum.repos.d/nginx.repo[nginx] name=nginx repo baseurl=http://nginx.org/packages/centos/5/$basearch/ gpgcheck=0 enabled=1# yum update # yum search n…

[Mobile Forensics] [Android] Santoku-Linux

sec

https://santoku-linux.com/

[Memory Forensics] メモリフォレンジック

sec

lsass.exeの正しい位置 winlogon.exe | --- lsass.exe --- services.exe | --- Process_A.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe ※「lsass.exe」は一つのみ、複数ある場合はおかしい。 ※「lsass.e…

[forensics] SuperTimeline

sec

【旧】 # mount -o loop,ro,show_files,streams_interface=windows,offset=32256 /mnt/hgfs/image.dd /mnt/windows_mount # log2timeline -z Japan -p -r -f winxp /mnt/windows_mount -w supertimeline.txt # l2t_process -b supertimeline.txt > supertime…

Fluentd mongodb

/etc/td-agent/td-agent.conf type tail path /var/log/httpd/access_log pos_file /var/log/td-agent/apache2.access_log.pos format apache2 tag mongo.apache.access type mongo database apache collection access host localhost port 27017

INetSim: Internet Services Simulation Suite

sec

偽サーバ,DNS,HTTPなど INetSim: Internet Services Simulation Suite - Project Homepage # Available service names are: # dns, http, smtp, pop3, tftp, ftp, ntp, time_tcp, # time_udp, daytime_tcp, daytime_udp, echo_tcp, # echo_udp, discard_tcp,…

FREE Security Training

sec

Home Page - www.SecurityXploded.com

[forensics] Memory Forensics (Windows,Mac and Linux)

sec

2010 2013 sandro suffert memory forensics introdutory work shop - pub…

[malware] Malware-Analyzer.com

sec

Malware-Analyzer.com is your solution to malware analysis tools, resources, and discounted malware reverse engineer training. Malware-Analyzer.com has a variety of tools from automated analysis to memory forensics. If you have a malware an…

[decode] [malware] UnBup - McAfee BUP Extractor for Linux

sec

Open Security Research: UnBup - McAfee BUP Extractor for Linux

PE-bear

sec

PE-bear | hasherezade's 1001 nights

PeStudio

sec

winitor

PyKd - Python extension to access Debug Engine

sec

Python extension for WinDbg Python extension for WinDbg - Home

the PE analysis toolkit

sec

pev download | SourceForge.net]

PEV PE ANALYSIS TOOLKIT

sec

Reversing PE executable files require a special tools because the payload that may contain the malware in PE files is packed inside another executable file that can be a legitimate. This makes a standard static analyses tool wont be able t…

【要注意】 玄関の「U字ロック」はひもで簡単に開けられるらしい  強姦目的で解錠し侵入した男「方法はネットで調べた」 (動画あり)

sec

【要注意】 玄関の「U字ロック」はひもで簡単に開けられるらしい 強姦目的で解錠し侵入した男「方法はネットで調べた」 (動画あり) | ニュース2ちゃんねる

Penetration Test Report

sec

offensive-security http://www.offensive-security.com/reports/penetration-testing-sample-report-2013.pdf

Malware Analysis: The State of Java Reversing Tools

sec

obfuscation Ghetto Forensics: Malware Analysis: The State of Java Reversing Tools

Mount shadow volumes on disk images

sec

Mount shadow volumes on disk images - ForensicsWiki

ShadowKit

Volume Shadow Copy forensic RRTX Blog: ShadowKit - Working with Disk Images

[malware] VirtualKD

VirtualKD is a tool that improves your kernel debugging performance with VMWare and VirtualBox. VirtualKD - Windows Kernel Debugger Booster for Virtual Machines

[forensics] Dropbox Forensics

Dropbox Forensics | Forensic Focus - Articles

metasploitable-linux-2.0.0

sec

Metasploitable is an intentionally vulnerable Linux virtual machine Metasploitable - Browse /Metasploitable2 at SourceForge.net

tree-cbass

sec

Taint-enabled Reverse Engineering Environment on top of a Cross-platform Binary Symbolic execution System tree-cbass - Taint-enabled Reverse Engineering Environment on top of a Cross-platform Binary Symbolic execution System - Google Proje…

ostinato

sec

Packet/Traffic Generator and Analyzer Ostinato

CanSecWest slide

sec

CanSecWest Applied Security Conference: Vancouver, British Columbia, Canada

[malware] APT1: technical backstage

sec

http://www.malware.lu/Pro/RAP002_APT1_Technical_backstage.1.0.pdf

Getting Started with Linux Memory Forensics

sec

SANS Digital Forensics and Incident Response Blog | Getting Started with Linux Memory Forensics | SANS Institute