Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
Repository Index
75,360 visible repositories in the index
889–912 of 1,412 · Most stars
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
A tool for studying JavaScript malware.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
eXtended Keccak Code Package
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Tiny hashing module that uses the native crypto API in Node.js and the browser
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Elixir encryption library designed for Ecto
- elixir
- encryption
- ecto
- hex
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Local-first password manager with direct device-to-device sync
- password-manager
- totp-authenticator
- security
- security-tools
Automated Attack Simulation in the Cloud, complete with detection use cases.
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Incident Response Forensic Framework
JD-Core is a JAVA decompiler written in JAVA.
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
OpenSOC Apache Hadoop Code
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor