
Block-Spring4Shell
POC firewall with rules designed to detect and block Spring4Shell vulnerability (CVE-2022-22965) exploit

POC firewall with rules designed to detect and block Spring4Shell vulnerability (CVE-2022-22965) exploit
Full exploit chain lab and Suricata IDS detection for CVE-2022-30190 (Follina) - MSDT RCE

Zeek package detecting CVE-2022-26937 exploitation attempts against Windows NFS servers via Network Lock Manager protocol analysis.

Zeek-based network detector for CVE-2022-24497, identifying RPC portmap exploit attempts via real-time traffic analysis and alerting.

Zeek-based network detector for CVE-2022-24491, monitoring RPC portmap set and dump actions to identify exploit attempts in real-time traffic.

F5 BIG-IP iRule providing mitigation against CVE-2022-22965 (Spring4Shell) remote code execution vulnerability in Java Spring Framework. Tested on…

A Zeek package to detect CVE-2022-23270, a PPTP vulnerability in Windows.