#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
perl-code/cve-2026-5000Proof-of-concept demonstrating a Windows Defender bypass technique for CVE-2026-5000, intended for controlled testing and defensive research.
rxerium/ai-bot-ip-rangesOfficial IP ranges for AI bot crawlers (OpenAI, Anthropic, Google, Microsoft, Perplexity). Weekly auto-updates.
smileyface101/crushftp-as2-bypass-research-cve-2025-54309Research on CrushFTP AS2 authentication bypass allowing unauthenticated admin access. Includes PoC scripts, detection rules, and technical analysis…
ysaxon/pyrocms-ssti-fixA drop-in fix for CVE-2023-29689 - SSTI in PyroCMS, via a custom Twig Sandbox implementation
masahiro-yamada/ognlcontenttyperejectorvalveThis is Valve for Tomcat7 to block Struts 2 Remote Code Execution vulnerability (CVE-2017-5638)
spanwich/sel4-ics-gateway-demoDefensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462
gmh5225/driver-hide-filechoose and hide windows files/path from kernel space using this driver
danindiana/cve-2026-32746-mitigationAutomated mitigation tool for CVE-2026-32746, providing atomic rollback, multi-firewall support (UFW, firewalld, nftables, iptables), and…
planetoid/cve-2026-21509-mitigationPowerShell script that applies a temporary registry-based mitigation for CVE-2026-21509, a Microsoft Office security feature bypass, with backup and…
yagnikkrish/metasploitable-penetration-testing-labControlled penetration testing lab demonstrating CVE-2011-2523 exploitation and mitigation techniques.
hackinglz/gibsonNetwork monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity
arisharazakhan-cpu/dod-blue-team-network-labHigh fidelity defensive security lab simulating a DoD aligned enterprise network with Active Directory, VLAN segmentation, STIG based hardening,…
gmh5225/disk-spooferKernel driver based disk size and sector query spoofing program, can evade Windows WMIC query.
m2l33k/blockguardBlockGuard is a Windows Data Loss Prevention (DLP) agent that intercepts and controls file access at the process level. It ensures that only…
jason996/maritime-security-paperComprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations
yaupunal/cve-2025-55182-scannerCVE-2025-55182-scanner with 2 different method
mcastens/alycon-threat-landscapeTraining-free anomaly detection framework using Shannon Entropy, Fisher Information, and Wasserstein Distance to map system states into geometrically…
nrnw/cve-2026-24061-gnu-inetutils-telnet-detectorA passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations
