Repository Index

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

• post-exploitation
• hacking
• backdoor
• stealth

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking

macOS (& ios) Artifact Parsing Tool

• dfir
• forensics
• macos

GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026

Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)

• actions
• bugbounty
• cicd

Sigma Queries turned into KQL for Defender using pysigma - Automated

• detection-engineering
• kql
• microsoftsentinel
• mitre-attack

TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel

• cybersecurity
• detection-engineering
• devops
• kql

Sigma Queries turned into SPL for Splunk Enterprise and Enterprise Security using pysigma - Automated