Defensive Tools

cisagov/esxiargs-recover

A tool to recover from ESXiArgs ransomware

trailofbits/sinter

A user-mode application authorization system for MacOS written in Swift

optiv/dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

gabriellandau/edrsandblast-godfault

EDRSandblast-GodFault

grahamcampbell/laravel-security

A wrapper of voku/anti-xss for Laravel

swimlane/atomic-operator

A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.

netwrix/pingcastlecloud

Audit program for AzureAD

salesforce/metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

0x0v1/audix

Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring

keowu/badrentdrv2

A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering them…

elastic/silhouette

Keep it secret, keep it safe

treussart/probemanager

Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...

ranguli/ioccheck

A tool for simplifying the process of researching IOCs.

qixils/anticropalypse

Discord bot for mitigating the aCropalypse vulnerability (CVE-2023-21036, CVE-2023-28303) by retroactively deleting vulnerable images

jenkinsci-cert/security-218

Disables Jenkins CLI/Remoting subsystem as a mitigation against unauthenticated remote code execution vulnerabilities SECURITY-218 and SECURITY-360,…

kolya5544/bearftp

Honeypot FTP server written in .NET Core (C#) for both Linux and Windows.

m-mizutani/alertresponder

Automatic security alert response framework by AWS Serverless Application Model