Repository Index

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

• security
• compliance
• log-analysis
• vulnerability-detection

Scanning APK file for URIs, endpoints & secrets.

• mobile-security
• android-security
• reverse-engineering
• bugbounty

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

• golang
• package-inventory
• supply-chain-security

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

• case-management
• cyber-security
• endpoint-security
• information-security

A python script that finds endpoints in JavaScript files

• infosec
• endpoints

Digging Deeper....

• incident-response
• forensics-investigations
• inventory-management
• endpoint-security

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

• azure
• defender-for-endpoint
• dfir
• kql

Elastic Security detection content for Endpoint

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

• finder
• graphql
• security
• spider

Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

• honeypot
• spring-boot
• tomcat

An endpoint-to-endpoint encryption based on Diffie-Hellman-Merkle with TLS1.3 styled handshake using MicroPython