A highly technical forensic and architectural guide. This module details exactly how AI-specific attacks manifest in system telemetry, followed by the rigorous, defense-in-depth security controls required to neutralize them.
This repository is a consolidated directory divided into five standalone, deep-dive modules. Each module comprehensively covers a specific domain of AI implementation, vulnerabilities, threat modeling, and automated defense mechanisms.
The automation tower defense RTS
Weighs the soul of incoming HTTP requests to stop AI crawlers
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
game of active directory
本项目集成了全网优秀的攻防武器工具项目,包含自动化利用,子域名、目录扫描、端口扫描等信息收集工具,各大中间件、cms、OA漏洞利用工具,爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
privacy-first, open-source and self-hosted CAPTCHA alternative with PoW and instrumentation challenges.
Tower defense game that teaches cloud architecture. Build infrastructure, survive traffic, learn scaling.
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
Advanced Privacy Browser Core with Unified Fingerprint Defense: Cloudflare, Akamai, Kasada, Shape, DataDome, PerimeterX, hCaptcha, FunCaptcha, Imperva, reCAPTCHA, ThreatMetrix, Adscore
Security Scanner for Agent Skills
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
attempting to detect smart glasses nearby and warn you
Open-source clone of the original X-Com 👽
明日方舟「卫戍协议:盟约」非官方同人复刻:浏览器自走棋塔防,单人或 1–4 人联机合作(非商业)
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
StenographAI is the secure privacy-first AI notepad & notetaker for confidential conversations in government & defence sectors. On Windows, Linux & MacOS.
Sentiment Analysis, Text Classification, Text Augmentation, Text Adversarial defense, etc.;
Scan MCP servers for potential threats & security findings.
ESB, SOA, REST, APIs and Cloud Integrations in Python
Security Governance for Agentic AI
Model Merging in LLMs, MLLMs, and Beyond: Methods, Theories, Applications and Opportunities. ACM Computing Surveys, 2026.
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.
Security-oriented list of resources about industrial network protocols.
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
—
AntiHunter Perimeter Defense Systems - DIGI Node Firmware
Real-time OSINT command center for the Iran/Israel and Russia/Ukraine theaters — 50+ live open-source intelligence sources (news, Telegram, military aircraft & naval tracking, missile alerts, prediction & defense markets) in one dashboard. No API keys. Free. Next.js + TypeScript.
A typeface that protects written content by poisoning unauthorized AI training datasets.
HERO = Hashing · Edge cases · Rubrics · Overbuild — the four shapes coding agents over-defend in. A paste-in contract that stops them. Works with Claude Code, Codex, Antigravity, Cursor, Copilot, Windsurf, Gemini CLI.
This repository provides a benchmark for prompt injection attacks and defenses in LLMs
Blacksea is an active honeypot and canary-bait control system built to detect and drown LLM-driven attackers. Blacksea doesn't stop at watching LLM attacks. It exploits flaws in the attacker's LLM judgment to gain arbitrary code execution on their machines, collect intel passive defenses can't reach, and make sure they don't come back.
No-root Android + ESP32 Wi-Fi/BLE security testing toolkit. Deauth, captive portal, packet capture, BLE HID, and defense/detection modules, controlled over USB-OTG, no custom kernel or external adapter required.
Whetstones Lab: measuring coevolution between adaptive malware and behavioral defense. De-weaponized research release — genomes, evolution rounds, telemetry, training harness (stubbed primitives), and lab range tooling. Payloads, real primitives, and C2 infrastructure intentionally withheld. Research and defensive use only.
Offline game collection: tower defence, sudoku, minesweeper, dots and boxes. Free, open source, no ads, no trackers. — مجموعهبازی آفلاین چوگان: رایگان، متنباز، بدون تبلیغ و بدون ردیاب.
Zemana AntiMalware 2026 Setup Guide for Windows 11 and 10 Security
Roblox Safety Utilities 2026: Open Source Scripts for Fair Play and Exploit Defense
Black Myth Wukong Save Editor and Stat Mod 2026
Combat-Lite Pro 2026: Client-Side Parry Defense and Fast-Equip Combat Authority for Roblox Bug Fixes
High-speed web security auditor & DevSecOps dashboard for SSL, HTTP headers, DNS defenses, and port exposure.
LummaC2 Stealer Defense and Reverse Engineering Toolkit 2026
Antifraud Trainer 2026: Best Interactive Scam Defense Simulator for Teams
Advanced HORNET 360 Cyber Defense Suite 2026
AI Anti-Fraud Trainer 2026: Interactive Scam Defense Simulation
YAZDHD Trainer Alternative 2026: Open-Source Zombie Defense Companion Tool
GPS (Guochuang Preparation Skills) — A multi-agent AI toolkit for competition planning, proposal review, pitch deck optimization, defense coaching, and award-level assessment.
Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.
Next-Gen Selfhosted Web Application Firewall (WAF) & Edge Reverse Proxy built in Go. Real-time threat defense, L7 traffic control, and unified admin console.
CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架
Offensive security research in Windows COM. Techniques for pentesters, red teamers, and defenders across the full attack lifecycle: recon, initial access, privilege escalation, lateral movement, persistence, and defense.
Crystal Clicker is a fast-paced, web-based hybrid game that blends idle clicker mechanics with escalating tower defense strategy. Designed with pure Vanilla JavaScript and styled using modern CSS glassmorphism, the game challenges players to protect a glowing central crystal core against relentless waves of invading enemies.
Open-source research prototype implementing an Agentic AI framework for real-time financial fraud detection, investigation, explainable risk assessment, and human-governed mitigation.
Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.
Offensive Linux Privilege Escalation — hands-on study notes: enumeration, sudo/SUID/capabilities, cron & systemd timers, kernel LPEs (DirtyPipe/OverlayFS/PwnKit), container & namespace escapes, and credential mining. Each technique with detection & defenses. CC BY 4.0.
DeepSeek Harness 远程与移动端安全网关插件:零修改 DSH 底层代码安全开放局域网与 Tailscale 连接 | DeepSeek Harness (DSH) Remote & Mobile Security Guard: safely opens Tailscale/LAN with zero core modifications, QR scan auth, RSA encryption & brute-force defense.
Mobile-friendly Arknights archive: operators, enemies and stories with Spine chibis and skin art. React, TypeScript and MUI on GitHub Pages.