"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Repository Index
57,138 visible repositories in the index
121–144 of 233 · Most stars
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
BlockBlock provides continual protection by monitoring persistence locations.
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Zero-allocation hashing for Java
- java
- hashing
- high-performance
- farmhash
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
A machine learning tool that ranks strings based on their relevance for malware analysis.
- machine-learning
- fireeye-flare
- strings
- malware-analysis
Enables client-side applications to dance OAuth with GitHub.
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
Advanced crypto library for the Go language
- crypto-library
- elliptic-curves
- go
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tool to gather Threat Intelligence indicators from publicly available sources
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Advanced keyboard-walk generator with configureable basechars, keymap and routes
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
Machinae Security Intelligence Collector
High-Performance word generator with a per-position configureable charset
Standalone password candidate generator using the PRINCE algorithm
Super Next generation Advanced Reactive honEypot
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue