Tools for blue team, defensive security, and threat protection.
t-beckett/vulnbook-deletion_scheduled-85395299Offline-first vulnerability findings tracker that searches 11 CVE databases in parallel, adds EPSS/KEV enrichment, and manages coordinated disclosure…
alloysecuregroup/phantomfsWindows honeypot using ProjFS to project decoy files that trigger Event Log and desktop alerts when accessed, with SMB remote session logging for…
bruneaug/dshield-siemDShield Sensor Log Collection with ELK
lionels-cyber/cve-2024-45519-zimbra-real-fixZimbra CVE-2024-45519 real fix - Official patch is incomplete
ubitquity/metabase-setup-endpoint-sqli-fixFixes unauthenticated SQL injection in a setup endpoint by replacing raw JDBC queries with ORM parameterization and constant-time token validation.
ubitquity/windows-winsock-uaf-mitigationThis repository contains a conceptual patch demonstrating the mitigation for CVE-2026-68820, a critical Use-After-Free (UAF) vulnerability in the…
kata-containers/kata-containersSecure OCI container runtime that runs workloads inside lightweight VMs, providing strong isolation across Kubernetes, containerd, and CRI-O with…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
sublime-security/sublime-rulesOpen-source YAML rule set for detecting and preventing email attacks including BEC, credential phishing, malware, and supporting threat hunting.
blackhillsinfosec/freelabfriday_labsThis repository contains all lab instructions for the following content: Info Sec Core Skills, SOC Core Skills, ADCD Labs, SOC Analyst Labs, & BnB…
grepular/foxcageRun Firefox in a rootless Podman container with dropped capabilities, isolated networking, and ephemeral storage to contain sandbox escapes and…
efforg/privacybadgerPrivacy Badger is a browser extension that automatically learns to block hidden trackers
phpboyscout/go/redactStrip credential-like content from free-form strings before they reach logs or telemetry. Part of the phpboyscout Go toolkit. ·…
drk1wi/portspoofEmulates open ports and service signatures across all 65535 TCP ports to slow reconnaissance, confuse scanners, and waste attacker resources with…
t-beckett/vulnbookStatic vulnerability findings tracker with parallel search across 11 CVE databases, EPSS enrichment, CISA KEV badges, coordinated disclosure…
fmd-foss/fmd-androidFind your device and control it remotely. Works over SMS, instant messengers, or FMD Server's web interface. A secure open source alternative to…
xtuc/airgapSecurity for the modern age of AI: defend against bad AI agents and malicious npm packages
gossithedog/threathuntingHunts for potential malware downloads and suspicious domain calls via common Windows LOLBins using YARA rules and Nexthink telemetry modules.
