Tools

hexastrike/ivanti-connect-secure-logs-parser

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282,…

onsec-fr/cve-2019-19781-forensic

Automated forensic script hunting for cve-2019-19781

danielwep/cve-netscalerfilesystemcheck

This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information

andrei-dr/cpanel-cve-2026-41940-ioc

CVE-2026-41940 cPanel/WHM auth bypass IOC scanner — fixes false positives in upstream detection script, adds log cross-correlation

corelight/zeek-cve-enrichment

Zeek script and Python utility to enrich network security monitoring logs with CVE identifiers for improved threat intelligence and vulnerability…

tangjie1/cve-2026-31431-check

CVE-2026-31431 Copy Fail Linux kernel vulnerability detection script

3tternp/cve-2026-41940---cpanel-whm-check

This is the office check script provided by cPanel for all the users who are using cPanel

garethmsheldon/cve-2026-22557-unifi-detection

Detection content for CVE-2026-22557 — UniFi Network Application unauthenticated path traversal (CVSS 10.0). Includes YARA, Sigma, KQL, Splunk SPL,…

jemhadar/mongobleed-dfir-triage-script-cve-2025-14847

The script focuses on safe artifact acquisition first, followed by optional on-host analysis, and produces a portable, hashed forensic archive…

0warn/defender

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

terminaljunki3/cve-2024-3400-checker

Check to see if your Palo Alto firewall has been compromised by running script againt support bundle.

rv4l3r3/log4v-vuln-check

This script is used to perform a fast check if your server is possibly affected by CVE-2021-44228 (the log4j vulnerability).

tdevworks/cve-2020-1472-zerologon-demo-detection-mitigation

Educational demo of CVE-2020-1472 (ZeroLogon) detection using Windows Event Logs and Suricata IDS, plus mitigation via Windows Updates. Includes…

jmussmann/cve-2023-4966-iocs

Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.

justicerage/freedomfighting

A collection of scripts which may come in handy during your freedom fighting activities.

withsecurelabs/linuxcatscale

Incident Response collection and processing scripts with automated reporting scripts

corelight/ecs-mapping

Mapping Corelight or Zeek data to Elastic Common Schema fields