Tools

dtrizna/quasarnix

Reverse Shell Detection with Machine Learning

ahmaaaaadbntaaaaa-byte/tid-the-instant-destroyer

Hardware-level security protocol for mitigating cache-based side-channel attacks.

rohitmalik7/cve-2024-38063-detection-mitigation-system

End-to-end cybersecurity project demonstrating detection and mitigation of CVE-2024-38063 using IDS, host-based monitoring, and virtual lab attack…

owasp/intrusion-alert-educational-network-ids

Lightweight Python-based IDS that monitors network traffic in real-time using Scapy, detecting DoS/DDoS attacks via per-IP request rate analysis with…

didi/kemon

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.

zedocun/soc-investigation-powershell-edrfreeze

SOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…

unclesocks/cyberresponders

CyberResponders is a terminal-based cybersecurity training game that enables players to respond to different cyber incident scenarios. Here, they…

acharaf06/cve-2017-5638-attack-and-defense

Docker-based security lab demonstrating Apache Struts2 S2-045 (CVE-2017-5638) exploitation and defense, featuring vulnerable and patched applications…

center-for-threat-informed-defense/adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

fa-pengfei/ngwaf

First iteration of ML based Feedback WAF

corelight/redxor

Detection of Linux Malware C2 RedXOR - demonstration

xuanxuan0/tietwagent

PoC memory injection detection agent based on ETW, for offensive and defensive research purposes

danielbohannon/out-fincodedcommand

POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command…