wazuh
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
anomaly-detectionanti-botcloud-security+12
16.8k
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
neo23x0/lokiIOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
ransomleak/training-security-awarenessOpen-source interactive security awareness training library with 130+ SCORM exercises covering phishing, vishing, BEC, MFA fatigue, and OWASP AI/LLM…
apache/spamassassinOpen-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.
virtualsamuraii/flyphishDeploy a phishing infrastructure on the fly.
raikia/fiercephishFiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule…
iamthefrogy/frogy2.0Orbis is an full spectrum automated external attack surface intelligent toolkit.
v4d1/spoofthatmailBash script to check if a domain or list of domains can be spoofed based in DMARC records
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
mdsecactivebreach/o365-attack-toolkitA toolkit to attack Office365
0nyx-my7h/cve-2025-43920PoC and technical write-up for CVE-2025-43920, a remote command injection in GNU Mailman 2.1.39's external archiver allowing unauthenticated code…
xaitax/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityMicrosoft-Outlook-Remote-Code-Execution-Vulnerability
0neb1n/cve-2020-1349Exploit for Outlook 2019 zero-click vulnerability CVE-2020-1349, using MIME header parsing bugs to achieve heap overflow and EIP control via vftable…