#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
gmh5225/disclosure-checkTool to identify the best mechanisms for privately disclosing a security vulnerability for a package/project.
poneyclairdelune/logjackfixA spigot plugin to fix CVE-2021-44228 Log4j remote code execution vulnerability, to protect Minecraft clients.
twi1ight00/printnightmareProvides PowerShell and batch scripts to back up, restore, and adjust Access Control Lists (ACLs) mitigating PrintNightmare Print Spooler…
jenderal92/password-strength-evaluatorPassword Strength Evaluator is a tool to evaluate the strength of passwords and provide recommendations to improve their security.
naveenbana5250/cve-2023-34362-defense-packageThreat-Informed Detection & Mitigation Package for MOVEit Transfer Vulnerability
kougyokugentou/cve-2021-1675A small powershell script to disable print spooler service using desired state configuration
betulssahin/cve-2025-0411-7-zip-mark-of-the-web-bypassCVE-2025-0411 7-Zip Mark-of-the-Web Bypass
mrezqi/cve-2021-1675_carbonblack_huntingqueryCarbonBlack hunting queries to detect PrintNightmare (CVE-2021-1675) exploitation via file, module load, and process events, based on Sigma rules.
iqlip/redactkithttps://addons.mozilla.org/addon/redactkit/ A Firefox extension that redacts sensitive words (e.g., names, emails, phone no.) in real-time across…
ernestak/cve-2022-30190Official guidance and workarounds for CVE-2022-30190, a remote code execution vulnerability in the Microsoft Support Diagnostic Tool (MSDT)…
esnet-security/cve-2020-16898Detects CVE-2020-16898: "Bad Neighbor"
eutectico/printnightmareFix for PrintNightmare CVE-2021-34527
cyberdashy/cve-2022-30190PowerShell script to mitigate CVE-2022-30190 by updating a registry DWORD key, designed for deployment via RMM tools like ConnectWise Automate.
homjxi0e/cve-2017-0290-Exploit script for CVE-2017-0290 targeting Windows Defender on Windows 8.1/10, designed to disable or bypass the built-in antivirus protection.
toddmaxey/cve-2023-36884PowerShell Script for initial mitigation of vulnerability
sentrium-security/follina-workaround-cve-2022-30190PowerShell scripts to apply and restore Microsoft's registry-based workaround for CVE-2022-30190 (Follina) vulnerability, deployable via InTune for…
ml-k-eng/cve-2023-38831-exploit-and-detectionThis repository has both an attack detection tool and a Proof-of-Concept (PoC) Python script for the WinRAR CVE-2023-38831 vulnerability.
ayub0x7/cve-2024-32019-pocChecks Netdata ndsudo SUID PATH privilege escalation exposure for CVE-2024-32019 and validates patches without weaponized exploitation.
