Repository Index

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

• ai-agents
• claude-code
• cybersecurity
• incident-response

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

• python
• unified-hosts
• malware
• ad-blocker

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor

Investigate malicious Windows logon by visualizing and analyzing Windows event log

• security
• dfir
• javascript
• visualization

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

• security
• kinesis
• serverless
• terraform

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

• awesome-list
• binary-analysis
• ghidra
• malware-analysis

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

DeepSeek Harness 破甲一体化安全分析插件：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）

• dsh-plugin
• cordis
• deepseek-harness
• dsh

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• security
• arkime
• cybersecurity

AWS Identity and Access Management Visualizer and Anomaly Finder

• aws
• iam
• security
• security-tools

Create adversarial attacks against machine learning Windows malware detectors

• adversarial-machine-learning
• infosec
• python
• attack

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).

• bugbounty
• cdx
• cli
• kali-linux