gfek's comments

On: Deep Dive into GitHub PoC Exploits Data and a "Prediction" for the Year 2024

[gfek]

A time series and forecast analysis on GitHub exploit (proof of concept) repositories.

On: CVE-2023-42793 – Attacking and Defending JetBrains TeamCity

[gfek]

In this blog post, you'll find:

What is CVE-2023-42793? What is JetBrains TeamCity? PRIOn KB Analysis: JetBrains TeamCity CVE-2023-42793 JetBrains TeamCity attacks by source Attacking JetBrains TeamCity (Proof of Concept) Affected JetBrains TeamCity versions How to address CVE-2023-42793 Log Analysis - Indicators Of Compromise

On: The Art and Science of Automated CVSS Predictions

[gfek]

In response to the challenge of efficiently assessing the increasing number of vulnerabilities, PRIOn has developed NLP models automating the prediction of CVSS vectors and base scores . These models leverage textual vulnerability descriptions (public or private) to provide a CVSS vector/base score output, addressing the time and resource constraints associated with manual assessments.

On: CVE-2023-46604: Attacking and Defending Apache ActiveMQ

[gfek]

Everything You Need to Know About Apache ActiveMQ CVE-2023-46604 Vulnerability.

On: 2023 Vulnerabilities and Threat Trends

[gfek]

We have seen a significant number of critical vulnerabilities that made headlines in 2023. Critical vulnerabilities are being exploited in the wild by threat actors. Understanding and monitoring vulnerability trends is crucial in maintaining robust cybersecurity practices. Vulnerability management is one of the foundational concepts of cyber security.

On: Lepus – Subdomain finder and many more

[gfek]

Lepus is a tool for enumerating subdomains, checking for subdomain takeovers and perform port scans - and boy, is it fast!

On: Public Cyber Security Datasets

[gfek]

Public datasets to help you address various cyber security problems using Machine Learning.