#1IR playbooks, triage, case management, evidence collection, and incident management tools.
Kitploit recommended
mhaggis/security-detections-mcpMCP to help Defenders Detection Engineer Harder and Smarter
lockness-ko/xz-vulnerable-honeypotAn ssh honeypot with the XZ backdoor. CVE-2024-3094
n3tsurge/cve-2021-36934Detection and Mitigation script for CVE-2021-36934 (HiveNightmare aka. SeriousSam)
ak-cybe/cve-2025-68613-n8n-rce-analysisCVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch validation, detection ideas, and hardening tips)
telly251/forwardnetworksdemoDemo to remediate CVE-2023-20198 using forward networks and tines
or2me/cve-2023-36884_patcherCVE-2023-36884 临时补丁
ambjlou/it355-lab4-enterprise-lan-securityThis repository contains a comprehensive security assessment of an enterprise LAN environment. The core focus of this project was the identification,…
mohamedbrek/soc335-cve-2024-49138-exploitation-detectedLetsDefend SOC lab investigating CVE-2024-49138 and related malicious activity.
cert-orangecyberdefense/ransomware_mapMap tracking ransomware, by OCD World Watch team
adityabhatt3010/cve-2025-53770-sharepoint-zero-day-variant-exploited-for-full-rceA critical zero-auth RCE vulnerability in SharePoint (CVE-2025-53770), now exploited in the wild, building directly on the spoofing flaw…
zam89/cve-2024-3400-potSimple honeypot for CVE-2024-3400 Palo Alto PAN-OS Command Injection Vulnerability
jomjosh17/log4shell-cve-2021-44228-Comprehensive SOC analysis of Log4Shell (CVE-2021-44228) including technical breakdown, detection indicators, remediation strategies, and incident…
criann/check-cve-2026-23111Script to check if system are vulnable to cve-2026-23111
griisemine/cve-2026-87902-detectionDetection toolkit and reproducible lab for CVE-2026-87902, an unauthenticated WordPress path traversal. Includes remote checker, IoC analyzer, Sigma…
