HASH
datadog/hashYAML-configurable low-interactive honeypot framework for deploying HTTP/HTTPS-based deception servers with built-in honeytraps and Datadog log…
defensive-toolsweb-securitynetwork-security+1
14222h 5m ago
Tools for blue team, defensive security, and threat protection.
datadog/hashYAML-configurable low-interactive honeypot framework for deploying HTTP/HTTPS-based deception servers with built-in honeytraps and Datadog log…
ayushpriya10/imdshiftAutomates migration of AWS workloads from IMDSv1 to IMDSv2 to mitigate SSRF attacks. Detects IMDSv1 usage across EC2, ECS, EKS, Lightsail, and more,…
joeavanzato/trawlerPowerShell script helping Incident Responders discover potential adversary persistence mechanisms.
hamza-megahed/odinCentralized IoC scanner that deploys Loki across endpoints, collects detection results, and parses logs into CSV for incident response and forensic…
klezvirus/syswhispers3SysWhispers on Steroids - AV/EDR evasion via direct system calls.
icyguider/nimcrypt2.NET, PE, & Raw Shellcode Packer/Loader Written in Nim
beyarz/portforgeLightweight utility to fool port scanners
bohops/rogueassemblyhunterRogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes.
wgpsec/createhiddenaccountA tool for creating hidden accounts using the registry || 一个使用注册表创建隐藏帐户的工具
scarredmonk/sysmonsimulatorSysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and…
domdogsec/nodesecurityshieldA Developer and Security Engineer friendly package for Securing NodeJS Applications.
hashicorp-forge/groveA Software as a Service (SaaS) log collection framework.
soteria-security/365inspectA PowerShell script that automates the security assessment of Microsoft 365 environments.
wavestone-cdt/edrsandblastWeaponizes vulnerable signed drivers to bypass EDR kernel callbacks, object callbacks, ETW TI provider, and userland hooks for LSASS memory dumping…
viralmaniar/ddwpastereconDDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team…
stamusnetworks/sciriusWeb interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…
hasherezade/hollows_hunterScans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory…
tylous/zipexecA unique technique to execute binaries from a password protected zip