#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
dropzsec/spliceprivillegeescalationfixthis little script blocks the new splice-ram-privlilleg ecalation fastly befor the contributers do it ( CVE-2026-31431) (CopyFail fix)
adem-hosni/mappedimagesdetectorLightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk
corelight/zeek-endpoint-enrichment-connEnrich the conn.log with EDR data
knqyf263/aqua-checksumsMonitors cryptographic integrity of container images, releases, and Git tags for supply chain security, verifying Sigstore cosign signatures with…
q-feeds/nftables-iptables-integration-scriptScript to implement Q-Feeds directly on NFtables or IPtables
avalahee/pdfjs_disable_evalCVE-2024-4367 mitigation for Odoo 14.0
torxx666/propoxHigh-performance Rust HTTP/HTTPS proxy with active defense: rate limiting, reputation-based access, WAF (anti-bot, anti-injection, path protection),…
nexxus67/cve-2026-25676Research and proof-of-concept for CVE-2026-25676, a DLL search path hijacking vulnerability in M-Track Duo HD installer, including root cause…
rocklambros/react2shell_hunterAWS Organization-wide detection toolkit for CVE-2025-55182 & CVE-2025-66478 (React Server Components / Next.js RCE vulnerabilities)
acharaf06/cve-2017-5638-attack-and-defenseDocker-based security lab demonstrating Apache Struts2 S2-045 (CVE-2017-5638) exploitation and defense, featuring vulnerable and patched applications…
eclipsemanic/threatsentry-aiThreatSentry AI is an intelligent threat hunting dashboard that leverages machine learning to proactively identify and prioritize risks in your…
sastraadiwiguna-purpleeliteteaming/ddos-purple-teaming-offensive-multi-vector-7-tier-defensive-holistic-blueprint-Replicable Blueprint for advanced DDoS Purple Teaming, engineered for the threat landscape. It integrates a Red Elite Teaming offensive…
aman-sharma-dev/netsentryxAn event-driven network monitoring platform that performs live packet capture (Npcap), low-latency traffic analytics, and unsupervised threat…
lionels-cyber/cve-2024-45519-zimbra-real-fixZimbra CVE-2024-45519 real fix - Official patch is incomplete
rxerium/honeypot🍯Honeypot Threat Intel
nosrevytsng/metabase-pre-auth-rce-pocCVE-2023-38646
ilhamrzr/rar-anomaly-inspectorDefensive PowerShell tool for static inspection of RAR archives and detection of CVE-2025-8088 path traversal anomalies.
zedocun/soc-investigation-powershell-edrfreezeSOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…
