maltrail
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
anomaly-detectionanti-botdefensive-tools+11
8.6k
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
apache/spamassassinOpen-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.
sublime-security/sublime-rulesSublime rules for email attack detection, prevention, and threat hunting.
rspamd/rspamdSpam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.
all3xj/fixing-google-secops-detectionsTuning and refactoring Google Chronicle Curated Detections to eliminate alert fatigue and fix logic gaps/bugs.
domainaware/parsedmarcA Python package and CLI for parsing aggregate and forensic DMARC reports
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
cisagov/scubagearAutomation to assess the state of your M365 tenant against CISA's baselines
cisco-talos/clamavOpen-source antivirus engine for detecting trojans, viruses, and malware via signature-based scanning; includes a daemon, on-demand CLI, and…
praneethnaidu1910-cmd/cve-2023-23397-purple-teamPurple team project exploiting CVE-2023-23397 Outlook NTLM leak with phishing delivery, plus Sigma/Wazuh detections mapped to MITRE ATT&CK for the…
wslyvh/paperweightPaperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data. Local-first and open source.
horkimhab/cve-2026-73570Proof-of-concept exploit for an actively exploited Zimbra Collaboration Suite vulnerability, designed for authorized penetration testing and…
osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
jishino567/cve-2026-73570Python PoC for CVE-2026-73570, an SMTP command injection in Zimbra. Sends malformed RCPT TO payloads to trigger shell command execution via…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
biutrap/cve-2026-73570Proof-of-concept exploit for CVE-2026-73570, demonstrating SMTP command injection via crafted RCPT TO header to trigger service status changes.