#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
eliushhimel/citrix-honeypotCitrix ADC (NetScaler) Honeypot. Supports detection for CVE-2019-19781 and login attempts
rashedhasan090/cve-2025-55182-mitigatorCLI scanner that detects likely vulnerable React/Next.js dependencies for CVE-2025-55182 and provides mitigation targets. Supports JSON output and…
dwulf/eternal-codexMy manifesto, and stories, images, and phun stuff
camp0/aiengineAIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua and Go NIDS (Network intrusion detection system).
nickops87/spring4shell-python-firewall-pocProof-of-Concept (POC) of a simple firewall in Python designed to mitigate the Spring4Shell (CVE-2022-22965) RCE attack by inspecting and blocking…
gmh5225/crowarmorLinux kernel security driver using LSM to harden the system, monitor and restore syscall table integrity, and protect CPU control registers against…
laachy/cve-2024-39930-ptrace-detection-mitigationRust-based tool to detect and mitigate CVE-2024-39930 ptrace exploitation, providing binary-level analysis and defensive countermeasures for Linux…
sibersan/apache_audit_cve-2026-23918Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification…
ozzi-/zimbra-cve-2017-8802-hotifxSecurity hotfix for CVE-2017-8802
sasqwatch/cve-2017-8570Proof-of-concept exploit for CVE-2017-8570 (Composite Moniker) using Packager.dll file-dropping technique to execute arbitrary SCT payloads via…
hnytgl/cve-2026-41089-detector这是一个用于防御巡检的 CVE-2026-41089 检测脚本。该漏洞是 Microsoft 在 2026 年 5 月安全更新中披露的 Windows Netlogon 远程代码执行漏洞。
kamalideenak/microsoft-defender-for-endpoint-deployment-on-windows-10-11-deviceThis repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling…
centariscyber/cve-2022-41040_mitigationPowerShell script to mitigate CVE-2022-41040 on affected Exchange servers by applying recommended configuration changes.
shoucheng3/nahsra__antisamy_cve-2016-10006_1-5-3Fast, configurable HTML sanitization library for preventing XSS and malicious code injection from untrusted user input. Provides a policy-driven API…
gmh5225/zeropointThis PowerShell script detects indicators of compromise for CVE-2025-53770 — a critical RCE vulnerability in Microsoft SharePoint. Created by…
andrew_vanderbilt/airwatchMenu bar app that monitors SSID changes to automatically reboot a Mac upon device snatching, providing a physical security countermeasure against…
nosie12/fire-wall-serverPython-based simulated firewall to detect and block Spring4Shell (CVE-2022-22965) exploit attempts. This project filters HTTP requests by identifying…
itzmeshervin/siem-dashboardA lightweight, real-time Security Information and Event Management (SIEM) dashboard built using Streamlit. It collects system logs, detects USB and…
