Tools

mthcht/threathunting-keywords

Awesome list of keywords and artifacts for Threat Hunting sessions

harendra-shakya/smart-contract-attack-vectors

A curated list of smart contract attack vectors

itm4n/pplcontrol

Windows tool to list, get, set, protect, and unprotect process protection levels (PP/L) for debugging, inspection, and privilege escalation.

xephora/threat-remediation-scripts

This repository contains a list of new remediation scripts.

idnahacks/goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

otrf/set-auditrule

Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity

bushidouk/ransomware-tool-matrix

A resource containing all the tools each ransomware gangs uses

alvi-se/ai-ublock-blacklist

Websites I personally found that are completely generated by AI. Pull requests welcome.

toborrm9/malicious_extension_sentry

Malicious Extension Database

alex-w-developer/getblocked

Lightweight, local-only MV3 Chrome extension for reducing common third-party web tracking.

0x6d69636b/windows_hardening

Audits Windows security settings against CIS, Microsoft, STIG, and BSI baselines, scores compliance, and applies hardening changes via registry or…

sigmahq/sigma-cli

The Sigma command line interface based on pySigma

cybermaggedon/cyberprobe

Capturing, analysing and responding to cyber attacks

nccgroup/conmachi

Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container

quahac/azure-ad-password-checker

Azure AD Password Checker

sandboxec/sandboxec

A lightweight command sandbox for Linux, secure-by-default, built on Landlock.