ketshash
cyberark/ketshashA little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
authenticationdefensive-toolsincident-response+3
168
cyberark/ketshashA little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
assurancemaladiesec/ad-description-password-finderRetrieve AD accounts description and search for password in it
ajtech-hue/cve-2021-3156-mitigation-shellscript-buildShell script that monitors for a vulnerable sudo process and triggers authentication lockout to mitigate CVE-2021-3156.
sinologicnet/sipcheckMonitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…
drduh/macos-security-and-privacy-guideCurated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…
chpratik/cve-2026-9830Threat intelligence report repository for CVE-2026-9830, an authentication bypass vulnerability in BookingPress Pro WordPress plugin, with detailed…
dropbox/securitybotDistributed alerting for the masses!
quarantyne/quarantyneModern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
domainaware/parsedmarcA Python package and CLI for parsing aggregate and forensic DMARC reports
target/strelka-uiStrelka Web UI for File Submission and Analysis
0xe7/wonkavisionDetects forged Kerberos tickets by dumping session and ticket data, scoring anomalies, and generating Windows event-log indicators for SIEM-based…
keerthivasan-sankar/secure-vault-for-commercialsecure vault for your files
squamity/cve-2026-8181-pocPython PoC for CVE-2026-8181, a critical authentication bypass in Burst Statistics WordPress plugin. Includes exploit automation, bulk scanning, and…
eliangonzi00/pockeycloakcve-2023-0264Proof-of-concept exploit for CVE-2023-0264 (Keycloak OIDC session hijacking) with a frontend for session_id substitution and an agent that detects…
sercanokur/cve-2026-41940-cpanel-whm-verification-toolPython verification script for CVE-2026-41940, an authentication bypass in cPanel & WHM, enabling authorized defensive validation and patching…
smileyface101/crushftp-as2-bypass-research-cve-2025-54309Research on CrushFTP AS2 authentication bypass allowing unauthenticated admin access. Includes PoC scripts, detection rules, and technical analysis…
andrei-dr/cpanel-cve-2026-41940-iocCVE-2026-41940 cPanel/WHM auth bypass IOC scanner — fixes false positives in upstream detection script, adds log cross-correlation
ubitquity/metabase-setup-endpoint-sqli-fixFixes unauthenticated SQL injection in a setup endpoint by replacing raw JDBC queries with ORM parameterization and constant-time token validation.