ayushpriya10/imdshiftAutomates migration of AWS workloads from IMDSv1 to IMDSv2 to mitigate SSRF attacks. Detects IMDSv1 usage across EC2, ECS, EKS, Lightsail, and more,…
nccgroup/windowsmempagedeltaA Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
corelight/detect-ransomware-filenames
sinologicnet/sipcheckMonitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…
blacksnufkin/deadmanswitchDeadManSwitch in rust with several triggers (remote local and network)
tomiwa-ot/py-amsiScan strings or files for malware using the Windows Antimalware Scan Interface
c0oki3s/veilgateAsymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-consistent…
singe/yellowA simple binary wrapper for DNS canarytokens.
trappsec-dev/trappsecOpen-source framework for embedding realistic decoy routes and honey fields into APIs to detect attackers probing business logic, converting…
jp1337/easywallWeb interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock…
ares-sys/uefi_bootkit_softlandingFirst public analysis of SoftLanding UEFI bootkit: Ring -2 implant, CVE-2025-7029, 240+ Gigabyte boards, GPU AI evasion, dual C2. YARA + Sigma +…
secdev02/cyber-decoyExperimental Decoy Broker
ryehr/hitms_steganographyEmbed multiple secret messages in LLM chat token choices using arithmetic/Discop steganographic coders, with bit-exact decoding and steganalysis…
adityabhatt3010/cve-2025-54253-inside-the-adobe-aem-forms-zero-dayBreaking down CVE-2025-54253 — an Adobe AEM-Forms exploit path from XXE to full remote code execution and its real-world impact.
kitskater/legacyshield-cve-2017-0144Defensive Windows security application providing compensating controls for CVE-2017-0144 (EternalBlue/MS17-010) through SMB monitoring, attack…
