qeeqbox Goto Github PK

.github

Github Settings

access-control

Access Control is using security techniques to protect a system against unauthorized access

analyzer

Analyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more)

application-service-attacks

apt-malware-reports-set-1

Some extracted Features\IoCs\Artifacts\Patterns from APT Malware

asynico-websockets-redis-server

asynico websockets redis server (Needed for internal testing)

authentication-bypass

A threat actor may gain access to data and functionalities by bypassing the target authentication mechanism

authorization-bypass

A threat actor may access the user's account using a stolen or leaked valid (existing) session identifier

automation-protocols-metadata

JSON file that contains an update metadata of Automation Protocols (Industrial control system, process automation, building automation, automatic meter reading, and automobile)

captcha-bypass

A threat actor may bypass the Completely Automated Public Turing test to tell Computers and Humans Apart (captcha) by breaking the solving logic, human-assisted solving services, or utilizing automated technology

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)

client-side-template-injection

A threat actor may trick a victim into executing native template syntax on a vulnerable target

countries-metadata

JSON file contains all countries metadata (Country name, cc, a3, and flag)

credential-stuffing

A threat actor may guess the target credentials using a known username and password pairs gathered from previous brute-force attacks

cross-site-request-forgery

A threat actor may trick an authenticated or trusted victim into executing unauthorized actions on their behalf

cryptography

cyber-attacks

A collection of attacks metadata that were used in my previous pen-test tools

cyber-kill-chain

Cyber Kill Chain is a model that Lockheed Martin created for understanding (Describe the sequence of events) and stopping cyberattacks

cybersecurity

Cybersecurity is the measures taken to protect networks, devices, and data against cyberattacks

data-classification

Data classification defines and categorizes data according to its type, sensitivity, and value

data-compliance

Data compliance is the process of following various regulations and standards to ensure that sensitive digital assets (data) are guarded against loss, theft, and misuse

data-lifecycle-management

Data Lifecycle Management (DLM) is a policy-based model for managing data in an organization

data-privacy-and-security

data-security

Safeguarding your personal information (How your info is protected)

data-states

Data states refer to structured and unstructured data divided into three categories (At Rest, In Use, and In Transit)

default-credential

A threat actor may gain unauthorized access using the default username and password

digital-forensics

Digital Forensics is the process of finding and analyzing electronic data

directory-listing

A threat actor may list files on a misconfigured server

docker-images

Kali and Parrot OS docker images accessible via VNC, RDP and Web

dom-based-cross-site-scripting

A threat actor may inject malicious content into HTTP requests. The content is not reflected in the HTTP response and executed in the victim's browser.