akamai-security-research
This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.
File Explorer
- dcom_demo.mp4
- Lifting the Fog of War.pptx
- Lifting the Fog of War.pdf
- rpc_att&ck_navigator.json
- rpc_visibility_demo.mp4
- Novel Detection of Process Injection.pdf
- process_network_baseline.csv
- CVE-2022-30216_RelayDemo.webm
- Exploring Ancient Ruins to Find Modern Bugs - Discovering a 0-Day in MS-RPC Service.pdf
- DEFCON - Spoofing certificates with MD5 collisions - party like it's 2008!.pdf
- Showcase CVE-2022-34689.mp4
- Exploring Ancient Ruins to Find New Bugs - Hexacon 2022.pdf
- wkssvc_demo_for_hexacon.mp4
- relay_demo_adcs.mp4
- slides.pdf
- slides.pptx
- Keywords.csv
- README.md
- DHCID_calc.py
- operator_wallets.csv
- README.md
- scheduled_tasks_names.csv
- telegram_channels.txt
- work_dirs.csv
- dhpcd_detection.sh
- file_paths.txt
- hash_list.txt
- mining_pool_domains.txt
- readme.md
- iocs.csv
- iocs.md
- mexals_detect.sh
- readme.md
- noa_pass_set.txt
- noa_user_set.txt
- infection_monkey_noabot_profile.conf
- iocs.csv
- noabot_detect.sh
- notbot.yar
- readme.md
- function_discovery_and_renaming.py
- hash_list.txt
- panchan.snort
- panchan.yar
- panchan_detect.sh
- readme.md
- srvsvc.idl
- srvsvc_vuln.cpp
- srvsvc_vuln.vcxproj
- srvsvc_vuln.vcxproj.filters
- srvsvc_vuln.vcxproj.user
- README.md
- srvsvc_vuln.sln
- evil_coll.cer
- Local_demo_results.png
- mitm_script.py
- msft_coll.cer
- README.md
- serve_website.py
- Showcase CVE-2022-34689.mp4
- vulnerability_local_demo.cpp
- hv_vuln.cpp
- hv_vuln.vcxproj
- hv_vuln.vcxproj.filters
- hv_vuln.vcxproj.user
- lsm.idl
- hv_vuln.sln
- README.md
- hv_vuln.cpp
- hv_vuln.vcxproj
- hv_vuln.vcxproj.filters
- hv_vuln.vcxproj.user
- lsm.idl
- hv_vuln.sln
- README.md
- Bindings.c
- defines.h
- ms-wkst.idl
- ms-wkst_c.c
- ms-wkst_h.h
- Source.c
- Source.c
- windowsshutdown.h
- windowsshutdown.idl
- windowsshutdown_c.c
- windowsshutdown_h.h
- windowsshutdown_s.c
- impersonate_bug.cpp
- impersonate_bug.sln
- impersonate_bug.vcxproj
- impersonate_bug.vcxproj.filters
- impersonate_bug.vcxproj.user
- lsm.idl
- README.md
- main.py
- POC 2.gif
- README.md
- README.md
- test.url
- cmd execution POC.mp4
- README.md
- wintest.yaml
- persistentVolume.yaml
- persistentVolumeClaim.yaml
- pod.yaml
- storageClass.yaml
- POC.jpg
- README.md
- POC.gif
- README.md
- theme.theme
- insecure_auth_idapython.py
- winreg_client.cpp
- winreg_import.yar
- winreg_relay_adcs.py
- netsh_rpc_filter.txt
- README.md
- RPC Filter Layers and Conditions.xlsx
- RPCFiltersViaWinAPI.c
- idl_parser.py
- idl_scraper.py
- README.md
- requirements.txt
- helper_funcs.py
- rpc_call_attributes_struct.py
- rpc_security_callback_consts.c
- security_callback_analyzer.py
- ida_python.py
- radare2.py
- __init__.py
- base_rpc_registration_scraper.py
- ida_rpc_registration_scraper.py
- radare_rpc_registration_scraper.py
- rpc_registration_scraper_factory.py
- __init__.py
- pe_rpc_if_analysis.py
- pe_rpc_scraper.py
- pe_utils.py
- README.md
- rpc_interfaces.json
- scraper_exceptions.py
- symbol_helper.py
- server12_raw_output.json
- server22_raw_output.json
- server22_rpc_servers_scrape.csv
- __init__.py
- base_connector.py
- connector_factory.py
- neo4j_connector.py
- rpc.grass
- __init__.py
- connection_mapper.py
- etw_tracker.py
- known_rpc_interfaces.py
- rpc_stats.py
- dcsync.png
- petitpotam.png
- psexec.png
- schtasks.png
- wmi.png
- __init__.py
- README.md
- requirements.txt
- rpc_visibility.py
- msrpc_security_flowchart.png
- README.md
- rpc_protocol_sequence.txt
- rpc_toolkit.png
- basic_uia.cpp
- EventHandler.cpp
- Header.h
- Makefile
- oepfinder.py
- README.md
- upx_dec.c
- upx_dec.jpg
- upxdump.py
- README.md
- waf_evasion_payloads.json
- README.md
- .gitignore
- AUTHORS
- LICENSE
- README.md
# Use via CDN
jsDelivrjsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.
Link
Example
// repository documentation
Was this content helpful?
(0 ratings)