Defensive Tools

bytecode77/r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

jvoisin/snuffleupagus

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

pwndexter/sharpedrchecker

C# tool that enumerates running processes, loaded DLLs, installed services, and drivers to detect the presence of AV, EDR, and logging products,…

sinologicnet/sipcheck

Monitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…

andrew_vanderbilt/bridgeblock

macOS menu bar app that detects and prevents wireless bridging attacks by automatically disabling the AirPort module when Ethernet connectivity is…

andrew_vanderbilt/airwatch

Menu bar app that monitors SSID changes to automatically reboot a Mac upon device snatching, providing a physical security countermeasure against…

lama-labs/zero-touch-containment

Antigena (Darktrace) → Aruba ClearPass CoA bridge — model-driven, real-time user/device quarantine. Zero SOC clicks. Hexagonal architecture, 82% test…

reyjesusq/sentinel-mcp

Autonomous AI-powered cyber defense system using MCP, Gemini 2.0 Flash, Dynatrace observability and MongoDB. Google Cloud Hackathon submission.

check-risk-waf/check-risk-waf

Cloud-based Web Application Firewall (WAF) providing L3/L7 protection against SQLi, XSS, DDoS, and bot attacks. Features AI assistant, anti-bot…

alloysecuregroup/phantomfs

Windows honeypot using ProjFS to project decoy files that trigger Event Log and desktop alerts when accessed, with SMB remote session logging for…

eveo7/aa-discord-audit

Reconciliation audit for Alliance Auth's Discord integration: finds guild members holding AA-managed roles that Auth never granted and strips or…

mastyf-ai/mastyf.ai

Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial testing,…

atlantsecurity/atlant-harden

AtlantHarden - free Windows, browser & Office security hardening. 579 settings incl. 354 DISA STIG controls (Win11/Edge/Chrome/Firefox/Office 365) +…

blackhillsinfosec/freelabfriday_labs

This repository contains all lab instructions for the following content: Info Sec Core Skills, SOC Core Skills, ADCD Labs, SOC Analyst Labs, & BnB…

yanchenyu360/cve-2026-41940-security-patch

针对CVE-2026-41940漏洞的临时缓解措施

cisagov/esxiargs-recover

A tool to recover from ESXiArgs ransomware

elastic/silhouette

Keep it secret, keep it safe