Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Repository Index
68,261 visible repositories in the index
73–96 of 110 · Most stars
Declarative style of authorization and validation in laravel.
- laravel
- laravel-package
- php
- laravel-acl
Digital Forensics Investigation Platform
- dfir
- security
- incident-response
- artifacts
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
Enables client-side applications to dance OAuth with GitHub.
Tool to gather Threat Intelligence indicators from publicly available sources
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.
- acme
- ddns
- frp
- golang
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
Python installable command line utiltity for mitigation of host and key compromises.
A modular Python application to collect intelligence for malicious hosts.
- cybersecurity
- investigation
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Universal python API to captcha solving services
- captcha
- captcha-solving
- captcha-breaking
- recaptcha
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
Easy to use and read action and content based authorizations.
- hacktoberfest
- hacktoberfest2020
Multithreaded threat Intelligence gathering built with Python3
- carbonblack
- python
- threatintel
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
- cve-2026-109618
- cve-2026-109619
- mitigation
- php
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
- a12-bypass
- activator
- bypassing
- checkm8
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.