Defensive Tools

travisbgreen/hunting-rules

Suricata rules for network anomaly detection

kata-containers/kata-containers

Secure OCI container runtime that runs workloads inside lightweight VMs, providing strong isolation across Kubernetes, containerd, and CRI-O with…

0xlipon/xss2shell

Behavior-first WordPress CVE-2026-64638 scanner using benign login probes; classifies sanitizer behavior and generates alert-only PoCs for authorized…

boreas37/cve-2026-64638-poc-xss2shell-

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

phpboyscout/go/redact

Strip credential-like content from free-form strings before they reach logs or telemetry. Part of the phpboyscout Go toolkit. ·…

c3rb3ru5d3d53c/signatures

Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma

fazilbaig1/cve-2026-26114-patch

patching N-day of CVE-2026-26114 before microsoft. where microsoft could not patch 100% in many months. but FAC security did it

volexity/threat-intel

Signatures and IoCs from public Volexity blog posts.

xephora/threat-remediation-scripts

This repository contains a list of new remediation scripts.

cedowens/macshellswift

Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedric Owens

cd-r0m/yara

Hundred Days of Yara Challenge

dfir-orc/dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows

decalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

sublime-security/sublime-rules

Open-source YAML rule set for detecting and preventing email attacks including BEC, credential phishing, malware, and supporting threat hunting.

didierstevens/falsepositives

Tools that trigger False Positive AV alerts

immersive-labs-sec/bruteratel-detectiontools

A collection of Tools and Rules for decoding Brute Ratel C4 badgers