mbanyamer/llama-stack-0.4.0rc3-local-cve-2026-25211Local proof-of-concept scanner that detects plaintext database passwords in llama-stack initialization logs, using regex pattern matching to identify…
chandanshastri/log4j_vulnerability_demoA simple program to demonstrate how Log4j vulnerability can be exploited ( CVE-2021-44228 )
kyos-public/keycloak-cve-2026-18963-huntHunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database
velessecurity/cve-2021-1675-printnightmare-analysisTechnical write-up and analysis of PrintNightmare (CVE-2021-1675 / CVE-2021-34527), covering RCE/LPE exploitation, detection via Windows event logs,…
wattocyber/masqLive recon and posture auditing for AI agent infrastructure: scans MCP configs, session logs, and APIs for secrets, poisoned catalogs, and CoT leaks.
eh-amish/windows-defender-security-auditor-cve-2026-50656-Read-only PowerShell security auditor for Windows endpoints and servers: checks Defender configuration, patch status, credentials, persistence,…
harshiys/cve-2007-2447-exploitation-siem-detection-labIsolated AD/Linux attack lab: exploited CVE-2007-2447 via Metasploit, detected with Wazuh SIEM mapped to MITRE ATT&CK (T1190, T1059)
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
mgeeky/decode-spam-headersA script that helps you understand why your E-Mail ended up in Spam
cisagov/untitledgoosetoolUntitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…
nccgroup/impossibletravelloganalysisBasic log analysis tool to detect impossible travel via IP address geographic information
d0rb/packetpirateA headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems.
corelight/icanntldZeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…
corelight/top-dnsTop DNS Measurement for Bro
corelight/zeek-openvpnA Zeek OpenVPN protocol analyzer plugin.
corelight/zeek-endpoint-enrichmentZeek log enrichment tool that adds host information and known entity references to enhance network security monitoring and incident response.
viliuskraujutis/androidbroadcastsmonitorA tool to subscribe to receive all standard Android broadcasts on your Android device.
dobybaxter127/nimbus-vestigeA forensic reconstruction engine for cloud and identity incident response.
