chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
chaitin / SafeLine
laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
yaklang / yakit
Cyber Security ALL-IN-ONE Platform
LOLBAS-Project / LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
snooppr / snoop
Snoop — инструмент разведки на основе открытых данных (OSINT world)
WithSecureOpenSource / chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
lkarlslund / Adalanche
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
mthcht / awesome-lists
Awesome Security lists for SOC/CERT/CTI
Purp1eW0lf / Blue-Team-Notes
You didn't think I'd go and leave the blue team out, right?
Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
FunnyWolf / agentic-soc-platform
Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)
enomothem / Whoamifuck
用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。
stanfrbd / cyberbro
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
0xDanielLopez / TweetFeed
TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.
infosecB / LOOBins
Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.
google / mcp-security
—
Mah3Sec / ForgeGuardian
Local-first, AI-native Software Supply Chain Security Platform
tc4dy / CVE-2026-54121-PoC-Exploit
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v