awesome-lists
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
curated-resourcesdigital-forensicseducation+4
1.9k
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
renniepak/cspbypassCSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…
misp/misp-taxonomiesTaxonomies used in MISP taxonomy system and can be used by other information sharing tool.
microsoft/agent-governance-toolkitPolicy enforcement, zero-trust identity, execution sandboxing, and audit logging for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10 with…
trickest/resolversThe most exhaustive list of reliable DNS resolvers.
lylemi/learn-web-hackingStructured study notes covering web hacking fundamentals, common vulnerabilities, penetration testing techniques, and defensive security, with…
misp/misp-galaxyClusters and elements to attach to MISP events or attributes (like threat actors)
oryon-osint/querytoolQuerytool is an OSINT framework based on Google Spreadsheet. With this tool you can perform complex search of terms, people, email addresses, files…
owasp/owasp-mcp-threat-modelingOWASP tool for systematic threat modeling using the Model Context Protocol to identify and mitigate security risks in software architecture.
rawfilejson/awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
shieldfy/api-security-checklistChecklist of the most important security countermeasures when designing, testing, and releasing your API
synacktiv/dicozorusA tool to generate and maintain wordlists for Web fuzzing.
hxnoyd/ossem-power-upA tool to assess data quality, built on top of the awesome OSSEM.
chaitanyagarware/cve-2026-54519Public advisory landing page for CVE-2026-54519: missing ownership checks in ai-agent-automation memory APIs enabling cross-user memory read and…
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
threathunters-io/kassandra_x33fcon_2026This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made available…
webbreacher/obsidian-osint-templatesThese templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should…
xm1k3/centCommunity edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place