jarm
salesforce/jarmActive TLS server fingerprinting tool that sends crafted Client Hello packets to generate unique JARM hashes for identifying server configurations,…
information-gatheringnetwork-securityreconnaissance+1
1.3k
salesforce/jarmActive TLS server fingerprinting tool that sends crafted Client Hello packets to generate unique JARM hashes for identifying server configurations,…
gherardofiori/maliciousbrowserextensionsThis Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…
m4now4r/vn_daily_samplesDaily collection of malicious samples originating from Vietnam for malware analysis, threat intelligence, and detection engineering research.
alphasoc/flightsimA utility to safely generate malicious network traffic patterns and evaluate controls.
andrewaeva/dgaThe repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…
osmankandemir/associated-threat-analyzerDetects malicious IPv4 addresses and domain names associated with a web application by comparing against local threat intelligence lists of known…
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
ahmed-tarek22752/rce-cve-2017-0199-detection-analysisThis repository contains a full blue-team malware analysis of a real malicious DOCX exploiting CVE-2017-0199. The lab includes sandbox execution,…
hybridbrothers/hunting-queries-detection-rulesThe purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…
ishwardeepp/cve-2025-0411-motw-pocProof-of-concept and technical analysis of CVE-2025-0411, a 7-Zip Mark-of-the-Web bypass vulnerability exploited in SmokeLoader campaigns, with…
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
arkha-corvus/letsdefend-soc173-follina-0-day-detectedWe are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered…
ilhomjonr/cve-2026-67595CVE-2026-67595 — Embedded malicious JavaScript (spyware) in VaahCMS 2.0.0–2.3.4 official releases. CVSS 8.1. Advisory + detection.
codingo/minesweeperA Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
sh1n0g1/z9Detects PowerShell-based malware artifacts from event logs and performs static analysis on PowerShell scripts to identify malicious activity.
randomaccess3/detectionsCurated repository of detection information and validation guidance for identifying malicious activity in enterprise environments.
respondiq/jsp-webshell-scanner🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.
adisasoc/cve-2024-49138-soc-investigationSOC investigation of CVE-2024-49138 exploitation involving brute-force activity, PowerShell execution, malicious payload analysis, privilege…