A collection of awesome security hardening guides, tools and other resources
Repository Index
47,133 repositories indexed
1–12 of 12 · Most stars
Security sensor for realtime threat detection and protection
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
Security Auditor Utility for GraphQL APIs
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Respounder detects presence of responder in the network.
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.