#1Tools for managing, sharing, and integrating Indicators of Compromise (IOCs) into security defenses.
Kitploit recommended
ace-responder/cve-2022-47966_checkerRun on your ManageEngine server
michael-kanda/wp2shell-ioc-scannerDetects shadow-administrator accounts in WordPress via configurable indicators and heuristics, then removes selected accounts through guarded, logged…
hackinglz/panrapidcheckExtract useful information from PANOS support file for CVE-2024-3400
grayxploit/cve-2026-0257Automated vulnerability scanner for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass) with TLS certificate enumeration, authentication…
embee-research/agenttesla-config-extractorConfig extractor for AgentTesla - Discord/Telegram Variant
threatmonit/log4j-iocsPublic IOCs about log4j CVE-2021-44228
dmitry-matvienko/malware-analysis-fake-hwmonitorTechnical analysis, writeup, and YARA rules for a DLL Sideloading campaign disguised as HWMonitor
lukeslp/redtail-iocIOCs and a read-only triage checklist from a real Linux root compromise: RedTail miner, XorDDoS persistence, MoneroOcean miner, DirtyFrag LPE…
lukehebe/kql-hunting_and_detection-queriesSome of my KQL hunting queries
iqx6889/cve-2026-52813-gogs-rceCVE-2026-52813 (Gogs Path Traversal → Git Hooks RCE) defensive writeup: root-cause & patch analysis, Sigma/SIEM detection rules, IOCs, non-intrusive…
eh-amish/windows-defender-security-auditor-cve-2026-50656-Read-only PowerShell security auditor for Windows endpoints and servers: checks Defender configuration, patch status, credentials, persistence,…
corelight/zeek-cve-enrichmentZeek script and Python utility to enrich network security monitoring logs with CVE identifiers for improved threat intelligence and vulnerability…
respondiq/jsp-webshell-scanner🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.
byinarie/zirconiumTool to search for IOCs related to HAFNIUM: CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065
tcbutler320/cve-2021-3441-checkCVE-2021-3441 CVE Check is a python script to search targets for indicators of compromise to CVE-2021-3441
svtagan/wp-cve-2026-87902Read-only PHP diagnostic script that checks WordPress version, core checksums, extra PHP files, and known plugin paths for CVE-2026-87902 exposure…
qi-scape/scan-shai-huludDetect CVE-2026-45321 Mini Shai-Hulud supply chain compromise — scans for 170 npm + 2 PyPI poisoned packages across TanStack, Mistral AI, UiPath,…
security-phoenix-demo/react2shell-scanner-cve-2025-55182React2shell-web-scanner
