Skip to content

Instantly share code, notes, and snippets.

View jcran's full-sized avatar
💭
feelin fancy

Jonathan Cran jcran

💭
feelin fancy
View GitHub Profile
- Our ways-in analysis witnessed a **substantial growth of attacks involving the exploitation of vulnerabilities as the critical path to initiate a breach** when compared to previous years. It almost tripled (180% increase) from last year, which will come as no surprise to anyone who has been following the effect of MOVEit and similar zero-day vulnerabilities. These attacks were primarily leveraged by Ransomware and other Extortion-related threat actors. As one might imagine, the main vector for those initial entry points was Web applications
- **Roughly one-third of all breaches involved Ransomware or some other Extortion technique.** Pure Extortion attacks have risen over the past year and are now a component of 9% of all breaches. The shift of traditional ransomware actors toward these newer techniques resulted in a bit of a decline in Ransomware to 23%. However, when combined, given that they share threat actors, they represent a strong growth to 32% of breaches. Ransomware was a top threat across 92% of
@jcran
jcran / rss_hackerone_hacktivity.py
Last active November 13, 2024 03:33 — forked from tetrillard/rss_hackerone_hacktivity.py
HackerOne Hacktivity - recent url monitor
import logging
import re
import json
import asyncio
import requests
#
# including these methods as wrappers around requests method
#
@jcran
jcran / rss_hackerone_hacktivity.py
Created November 13, 2024 03:30 — forked from tetrillard/rss_hackerone_hacktivity.py
HackerOne Hacktivity to RSS feed
#!/usr/bin/env python3
import sys
import requests
import urllib3
import json
import re
from types import SimpleNamespace as Namespace
from feedgen.feed import FeedGenerator
output = ''
{
"value": {
"known_technology_regex": [
"Server: Nginx 1.2.2",
"Via: Varnish 1.1",
"data-react-helmet=\"true\" rel=\"stylesheet\"",
"Via: 1.1 4a3448a83573e51d340356257951f57a.cloudfront.net (CloudFront)",
"/etc.clientlibs/clientlibs/granite/jquery.lc-[a-f0-9]{32}-lc.min.js",
"/etc.clientlibs/clientlibs/granite/utils.lc-[a-f0-9]{32}-lc.min.js",
"/etc.clientlibs/clientlibs/granite/jquery/granite.lc-[a-f0-9]{32}-lc.min.js",
{
"value": {
"known_technology_regex": [
"Server: AkamaiNetStorage",
"href=\"https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css\"",
"src=\"https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js\""
],
"known_technology_regex_reasons": [
"Identifies the server as AkamaiNetStorage",
"Identifies the use of Microsoft's Fluent Design System (MWF)",
@jcran
jcran / 1
Created July 17, 2024 22:46
asdfxasdf
test
@jcran
jcran / 1
Created July 17, 2024 22:37
asdf
test
@jcran
jcran / 1
Created July 17, 2024 22:36
asdf
test
@jcran
jcran / test
Created December 23, 2021 02:42
did:3:kjzl6cwe1jw147tzwskpaew9s0e292hpq6pr1y4o5oma3pxn5ybok1yqkf81ixc
@jcran
jcran / test
Created December 23, 2021 02:42
did:3:kjzl6cwe1jw147tzwskpaew9s0e292hpq6pr1y4o5oma3pxn5ybok1yqkf81ixc