overview
threat intelligence dashboard — monitoring, analysis, and response
2
10
last 7 days
8
tools, pocs, experiments
operational
all services online
INC-2025-040
Memory Forensic Investigation: Credential Theft
INC-2025-041
Ransomware Variant Reverse Engineering
INC-2025-042
Heap Overflow Analysis in libpng 1.6.40
2025-04-17 14:32 UTC
new cve-2025-16988 exploit observed in the wild targeting unpatched nginx servers. requests contain malicious x-forwarded-for header triggering buffer overflow in request parsing module. exploit chain includes bypass for waf rules via malformed http version string.
2025-04-17 11:15 UTC
stealer malware campaign using legitimate digital certificate for distribution. signed binary masquerades as system update utility from trusted vendor. actual payload steals browser credentials, crypto wallets, and ssh keys. certificate appears to be compromised from software build pipeline.
2025-04-17 09:42 UTC
new yara rules released for apt29 activity patterns. rules detect custom cobalt strike profiles with specific beacon configurations, dns tunneling techniques, and lateral movement scripts. includes signatures for recently observed c2 infrastructure in eastern europe.
yara-ruleset-custom
curated yara rules for detecting emerging threats and custom malware families. supplements public rule sets with private signatures.
buffer-overflow-poc.py
demonstrates exploitation technique for cve-2025-16847 (libpng heap overflow). includes heap grooming primitives and controlled write primitive.