l4r1k/citrixnetscaleranalysis🔬 Jupyter notebook to help automate some of the forensic analysis related to Citrix Netscalers compromised via CVE-2019-19781
fastmo/cve-2022-28672CVE-2022-28672 Vulnerabilidad Foxit PDF Reader - UaF - RCE - JIT Spraying
dcscoder/exchange_ioc_hunterCVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065
cert-hr/log4shellThis repo contains IoCs which are associated with exploitation of CVE-2021-4428.
watchguard-threat-lab/log4shell-iocsA collection of IOCs for CVE-2021-44228 also known as Log4Shell
fevar54/detectar-backdoor-en-liblzma-de-xz-utils-cve-2024-3094-Regla YARA para detectar el backdoor de liblzma en XZ Utils 5.6.0/5.6.1 (CVE-2024-3094).
honeynet/log4shell-dataData we are receiving from our honeypots about CVE-2021-44228
jmussmann/cve-2023-4966-iocsPython script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.
bakedmuffinman/blacklotusdetectionCreated to help detect IOCs for CVE-2022-21894: The BlackLotus campaign
nivdolgin/cve-2018-13379Hunting CVE-2018-13379
ben-smash/l4j-infoCompiling links of value i find regarding CVE-2021-44228
ernestak/sigma-rule-for-cve-2022-30190Sigma rule for detecting exploitation of CVE-2022-30190 (Follina) via Windows process creation events, enabling SOC teams to identify malicious…
mikesxrs/cve-2023-21716_yara_resultsResults of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar
blackberry/threat-research-and-intelligenceBlackBerry Threat Research & Intelligence
graphworlok/cve-2021-35394-ecosystemTracking the family of unrelated IoT botnets sharing CVE-2021-35394 as a delivery vector — findings, relationships, methodology.
mandiant/ioc-scanner-cve-2019-19781Indicator of Compromise Scanner for CVE-2019-19781
suominen/cve-2025-39682Single-page tracker recording per-distribution patch status for CVE-2025-39682, a use-after-free in the Linux kernel kTLS receive path.