reddrip7/log4shell_cve-2021-44228_related_attacks_iocsCurated repository of Indicators of Compromise (IOCs), attack source IPs, and Snort/Suricata detection rules for Log4Shell (CVE-2021-44228) attacks.
executemalware/malware-iocsCurated collection of indicators of compromise extracted from real-world malware investigations, including hashes, domains, and IPs for threat…
withsecurelabs/doublepulsar-detection-scriptA python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
adamrpostjr/cve-2021-27065Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.
abdaullahag/threatlensPython CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan,…
siberanka/rdp-guardMonitors Windows Security logs for failed RDP attempts and automatically blocks abusive IPs via Windows Firewall, with configurable thresholds and…
ak-cybe/cve-2025-68613-n8n-rce-analysisCVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch validation, detection ideas, and hardening tips)
wadesweaponshed/cve-2026-93616_checksShell and SmartDashboard scripts that check Check Point management servers for indicators of compromise tied to CVE-2026-93616, including rogue…
drew-alleman/datasurgeonQuickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
cisagov/check-your-pulseThis utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.
gmh5225/malwaredbCurated collection of 961 malware families (1.36 GB) in password-protected ZIP archives, organized by family and type for analysis and research.
hackinghippo/log4shell_ioc_ipslog4j / log4shell IoCs from multiple sources put together in one big file (IPs) more coming soon (CVE-2021-44228)
aradhyacp/secflowAI-driven automated threat analysis pipeline that routes files, URLs, IPs, domains, or images through specialized security analyzers and generates…
cado-security/rip_rawRip Raw is a small tool to analyse the memory of compromised Linux systems.
mahfuzreham/cpanel-cve-2026-41940cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script
arsolutioner/fortigate-belsen-leakResearch repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group
phinehasnarh/cve-2024-4577-letsdefend-walkthroughThis is an Incident Response Walkthrough: Mitigating a Zero-Day Attack (CVE-2024-4577)
