#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
chryzsh/darthsidiousBuilding an Active Directory domain and hacking it
hlldz/reflexxionRefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first…
salesforce/metabadgerPrevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
ranguli/ioccheckA tool for simplifying the process of researching IOCs.
optiv/dentA framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
trailofbits/sinterA user-mode application authorization system for MacOS written in Swift
google/santaA binary authorization and monitoring system for macOS
efforg/https-everywhereA browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.
cloudflare/mitmengineA MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
m-mizutani/alertresponderAutomatic security alert response framework by AWS Serverless Application Model
mozilla/mozdefDEPRECATED - MozDef: Mozilla Enterprise Defense Platform
foospidy/honeypyA low to medium interaction honeypot.
nbulischeck/tytonKernel-Mode Rootkit Hunter
spiderlabs/owasp-modsecurity-crsOWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
didi/kemonAn Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.
treussart/probemanagerCentralize Management of Intrusion Detection System like Suricata Bro Ossec ...
