📈 GH Trending Explorer 🎲 Surprise me

Search: defense · clear

CyberDefenderAI / Attack-Evidence-Compensating-Controls

A highly technical forensic and architectural guide. This module details exactly how AI-specific attacks manifest in system telemetry, followed by the rigorous, defense-in-depth security controls required to neutralize them.

▲ 32/7d ★ 32 6d ago
CyberDefenderAI / Cybersecurity-in-the-field-of-AI

This repository is a consolidated directory divided into five standalone, deep-dive modules. Each module comprehensively covers a specific domain of AI implementation, vulnerabilities, threat modeling, and automated defense mechanisms.

▲ 30/7d ★ 30 6d ago
TecharoHQ / anubis

Weighs the soul of incoming HTTP requests to stop AI crawlers

★ 24k Go 2d ago
guchangan1 / All-Defense-Tool

本项目集成了全网优秀的攻防武器工具项目,包含自动化利用,子域名、目录扫描、端口扫描等信息收集工具,各大中间件、cms、OA漏洞利用工具,爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。

★ 8.2k Python 1d ago
tiagozip / cap

privacy-first, open-source and self-hosted CAPTCHA alternative with PoW and instrumentation challenges.

★ 8.1k JavaScript 8d ago
pshenok / server-survival

Tower defense game that teaches cloud architecture. Build infrastructure, survive traffic, learn scaling.

★ 6.5k JavaScript 1d ago
cifertech / ESP32-DIV

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32

★ 4.2k C++ 28d ago
gadievron / raptor

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

★ 3.9k Python today
botswin / BotBrowser

Advanced Privacy Browser Core with Unified Fingerprint Defense: Cloudflare, Akamai, Kasada, Shape, DataDome, PerimeterX, hCaptcha, FunCaptcha, Imperva, reCAPTCHA, ThreatMetrix, Adscore

★ 2.6k TypeScript 2d ago
Cloud-Architekt / AzureAD-Attack-Defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

★ 2.6k PowerShell 1d ago
sganggs / Stronghold-Protocol

明日方舟「卫戍协议:盟约」非官方同人复刻:浏览器自走棋塔防,单人或 1–4 人联机合作(非商业)

★ 1.7k JavaScript 1d ago
infosecB / awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

★ 1.4k 8d ago
stenolabs / stenoai

StenographAI is the secure privacy-first AI notepad & notetaker for confidential conversations in government & defence sectors. On Windows, Linux & MacOS.

★ 1.3k Python 4d ago
yangheng95 / PyABSA

Sentiment Analysis, Text Classification, Text Augmentation, Text Adversarial defense, etc.;

★ 1.1k Jupyter Notebook 1d ago
zatosource / zato

ESB, SOA, REST, APIs and Cloud Integrations in Python

★ 1.0k Python today
center-for-threat-informed-defense / attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

★ 785 TypeScript 6d ago
bsauce / kernel-security-learning

Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.

★ 778 C 10d ago
coipond / coi

Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.

★ 757 Go today
NoblerWorks-HQ / IRONSIGHT

Real-time OSINT command center for the Iran/Israel and Russia/Ukraine theaters — 50+ live open-source intelligence sources (news, Telegram, military aircraft & naval tracking, missile alerts, prediction & defense markets) in one dashboard. No API keys. Free. Next.js + TypeScript.

★ 665 TypeScript today
isaqueseneda / shieldfont

A typeface that protects written content by poisoning unauthorized AI training datasets.

★ 658 TypeScript 5d ago
wanshuiyin / HERO-Anti-OverDefense

HERO = Hashing · Edge cases · Rubrics · Overbuild — the four shapes coding agents over-defend in. A paste-in contract that stops them. Works with Claude Code, Codex, Antigravity, Cursor, Copilot, Windsurf, Gemini CLI.

★ 509 Markdown 3d ago
cracken-ai / blacksea

Blacksea is an active honeypot and canary-bait control system built to detect and drown LLM-driven attackers. Blacksea doesn't stop at watching LLM attacks. It exploits flaws in the attacker's LLM judgment to gain arbitrary code execution on their machines, collect intel passive defenses can't reach, and make sure they don't come back.

★ 110 Python 1mo ago
7wp81x / NRSuite-Android

No-root Android + ESP32 Wi-Fi/BLE security testing toolkit. Deauth, captive portal, packet capture, BLE HID, and defense/detection modules, controlled over USB-OTG, no custom kernel or external adapter required.

★ 109 Kotlin 1d ago
dahan6 / whetstones-lab

Whetstones Lab: measuring coevolution between adaptive malware and behavioral defense. De-weaponized research release — genomes, evolution rounds, telemetry, training harness (stubbed primitives), and lab range tooling. Payloads, real primitives, and C2 infrastructure intentionally withheld. Research and defensive use only.

★ 99 Python 1mo ago
choganhq / chogan

Offline game collection: tower defence, sudoku, minesweeper, dots and boxes. Free, open source, no ads, no trackers. — مجموعه‌بازی آفلاین چوگان: رایگان، متن‌باز، بدون تبلیغ و بدون ردیاب.

★ 84 HTML today
Hamidooh / securify

High-speed web security auditor & DevSecOps dashboard for SSL, HTTP headers, DNS defenses, and port exposure.

★ 62 TypeScript 10d ago
leewayworks / guochuang-gps

GPS (Guochuang Preparation Skills) — A multi-agent AI toolkit for competition planning, proposal review, pitch deck optimization, defense coaching, and award-level assessment.

★ 52 Python 2mo ago
Mister-iks / pcybox-attackgraph

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

★ 47 TypeScript 4d ago
divinelabio / Aegis

Next-Gen Selfhosted Web Application Firewall (WAF) & Edge Reverse Proxy built in Go. Real-time threat defense, L7 traffic control, and unified admin console.

★ 47 TypeScript 17d ago
angusdevgo / Seep-Tool

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

★ 45 18d ago
artemy-ccrsky / COM-Jungle

Offensive security research in Windows COM. Techniques for pentesters, red teamers, and defenders across the full attack lifecycle: recon, initial access, privilege escalation, lateral movement, persistence, and defense.

★ 42 21d ago
drJhonatan00 / Crystal_Clicker

Crystal Clicker is a fast-paced, web-based hybrid game that blends idle clicker mechanics with escalating tower defense strategy. Designed with pure Vanilla JavaScript and styled using modern CSS glassmorphism, the game challenges players to protect a glowing central crystal core against relentless waves of invading enemies.

★ 40 JavaScript 9d ago
bbrepo / agentic-fraud-defense-framework

Open-source research prototype implementing an Agentic AI framework for real-time financial fraud detection, investigation, explainable risk assessment, and human-governed mitigation.

★ 35 Python 22d ago
armourinfosec / Offensive-Windows-Privilege-Escalation

Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.

★ 34 2mo ago
armourinfosec / Offensive-Linux-Privilege-Escalation

Offensive Linux Privilege Escalation — hands-on study notes: enumeration, sudo/SUID/capabilities, cron & systemd timers, kernel LPEs (DirtyPipe/OverlayFS/PwnKit), container & namespace escapes, and credential mining. Each technique with detection & defenses. CC BY 4.0.

★ 32 2mo ago
IceApriler / dsh-remote-mobile

DeepSeek Harness 远程与移动端安全网关插件:零修改 DSH 底层代码安全开放局域网与 Tailscale 连接 | DeepSeek Harness (DSH) Remote & Mobile Security Guard: safely opens Tailscale/LAN with zero core modifications, QR scan auth, RSA encryption & brute-force defense.

★ 31 JavaScript 3d ago
steve1316 / ak-archive

Mobile-friendly Arknights archive: operators, enemies and stories with Spine chibis and skin art. React, TypeScript and MUI on GitHub Pages.