wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
cved-sources/cve-2017-1000117cve-2017-1000117
medicean/vulapps快速搭建各种漏洞环境(Various vulnerability environment)
rxerium/cisa-kevAggregates and cross-references CISA's Known Exploited Vulnerabilities with VulnCheck KEV and Nuclei scanning templates for coverage analysis.
protectai/ai-exploitsA collection of real world AI/ML exploits for responsibly disclosed vulnerabilities
zhangyongbo100/-ruby-dl-handle.c-cve-2009-5147-Community-maintained database of Ruby gem security advisories with structured CVE data, CVSS scores, and patched version requirements. Integrates…
canonical/ubuntu-security-noticesUbuntu vulnerability dataset publishing USN/LSN security notices in OSV and OpenVEX JSON formats for automated vulnerability and VEX-aware dependency…
nu11secur1ty/nmap-cheat-sheetCurated cheat sheet for Nmap, covering target selection, port scanning, service/OS detection, NSE scripts, and output formats for network…
redhuntlabs/awesome-asset-discoveryCurated list of asset discovery and attack surface reconnaissance resources covering subdomain enumeration, IP discovery, port scanning, email…
botesjuan/burp-suite-certified-practitioner-exam-studyPractical study notes and walkthroughs for PortSwigger Academy labs, covering web vulnerabilities, payloads, enumeration, and BSCP exam strategies.
horkimhab/cve-2026-59310Educational CVE proof-of-concept repository with lab scripts for reproducing, testing, and analyzing specific vulnerabilities in isolated…
rxerium/rxerium-templatesNuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities.
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
subat0mik/misconfiguration-managerMisconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening…
paulsec/awesome-windows-domain-hardeningA curated list of awesome Security Hardening techniques for Windows.
bohops/ultimatewdacbypasslistA centralized resource for previously documented WDAC bypass techniques
selinuxproject/selinux-notebookComprehensive open-source book on SELinux covering kernel components, userspace libraries, policy toolchain, and policy language. Includes build…
owasp/secure-headers-projectOWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.
