cms-exploitation-campaign
rxerium/cms-exploitation-campaignLarge Scale Exploitation Campaign against CMS devices reported in July 2026
defensive-toolsintrusion-detectionthreat-intelligence+4
3
rxerium/cms-exploitation-campaignLarge Scale Exploitation Campaign against CMS devices reported in July 2026
infokom-ki/zimbra-cve-2026-73570-rulesWazuh detection rules for CVE-2026-73570, an OS command injection in Zimbra Collaboration Suite, monitoring web access logs and zimbra.log for…
siddharth2440/network-detection-engineLightweight network intrusion detection engine capturing live traffic with libpcap. Detects SYN/ICMP floods, port scans, and signature-based web…
nerium-security/cve-2025-55182Host-based detection rules for the RCE vulnerability in the React JavaScript framework.
mail-in-a-box/mailinaboxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
beenuar/aisocSelf-hostable AI SOC that fuses security alerts, auto-triages via agentic AI, runs MITRE ATT&CK investigations, and logs every agent decision in a…
ion-storm/sysmon-configAdvanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic…
back2root/log4shell-rexPCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs
an0nud4y/av-edr-lab-environment-setupAV/EDR Lab environment setup references to help in Malware development
v1d1an/s1emThis project is a SIEM with SIRP and Threat Intel, all in one.
srlabs/certiceptionAn ADCS honeypot to catch attackers in your internal network.
mushorg/buttinskyBotnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
puniaze/portdogNetwork anomaly detector that monitors raw packets to identify port scanning activity in real time, with flexible sniffing duration controls and live…
arthastang/iot-home-guardA tool for malicious behavior detection in IoT devices
huntresslabs/threat-intelThis repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.