Threat Intelligence For Clash Route Rules. Contribute to Fadouse/clash-threat-intel development by creating an account on GitHub.

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities - Cybereason-Public/owLSM

KQL hunting queries and SIGMA rules for Microsoft Sentinel - Entra ID identity attack detection. Contributed to Azure-Sentinel and SigmaHQ. - descambiado/entra-id-detection-engineering

DockerRemoteAPI未授权访问(2375端口)利用工具，支持容器逃逸. Contribute to Janhsu/DockerAPITool development by creating an account on GitHub.

飞牛系统（fnOS）远程代码执行链：认证绕过. Contribute to a0yami/fnos-rce-chain development by creating an account on GitHub.

基于Go语言的网络安全的封装开发库，包含在Go语言中的几乎全部的封装函数（包括但不限于、http、端口、sub、文件上传、sql）等一系列的函数封装，让网络安全开发在Go语言中更简单 - xiguayiqiu/gyscan_code

Spring4Shell detection system using Random Forest and L7 payload analysis - lukrencijus/spring4shell-rf-detection

CRAReady test fixture: vuln-spring4shell. Contribute to appliedai-uk/craready-test-vuln-spring4shell development by creating an account on GitHub.

🚀 Automate Sigma rule conversion to KQL and Terraform for Microsoft Sentinel, streamlining detection management with infrastructure-as-code. - guisant17/TerraSigma

The aggregation engine behind dragnet.dev polls ~70 threat-intel sources and emits Sigma rules, IOC feeds, and STIX bundles for every major SIEM. - dragnet-dev/dragnet

A malware scanner with Yara and ClamAV binding. Contribute to dmknght/rkcheck development by creating an account on GitHub.

Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacke...

IOC scanner for agentic AI coding tools — detects Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268, and DPRK PromptMink. - dhawaldesai/agentic-ioc-scanner

Contribute to alyaapm/CVE-2025-55182-shellinteractive development by creating an account on GitHub.

Threat intelligence database for PRX-SD. Hash signatures and YARA rules from 10+ open sources. - openprx/prx-sd-signatures

Collection of interesting Yara Rules. Contribute to S12cybersecurity/YaraRules development by creating an account on GitHub.

Hands-on exploitation of the VSFTPD 2.3.4 backdoor vulnerability using Metasploit to gain shell access, create users, modify logs, and attempt privilege escalation in a secure lab environment. - Da...

Discover LES-Modern v3.0, an advanced tool for dynamic Linux exploit suggestions, leveraging real-time CVE data and comprehensive reporting. 🚀💻 - Jarrenstyle/les-moders

70k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒 - topscoder/nuclei-wordfence-cve

Burp Suite 内嵌扩展型 MCP bridge，用来把 Burp 里的 HTTP history、Repeater、Scanner、接口聚合索引等能力暴露给支持 MCP 的 AI 客户端。 - laohuan12138/burp-mcp-bridge