xây dựng công cụ tự động tạo chữ ký yara từ các đặc trừng chung 1 họ mã độc - vanity1412/Automated-YARA-Rule-Generation-Tool

Native Go engine for automated aggregation, sanitization, and JSON-exporting of global CVE exploit Proof-of-Concepts. Continuously mirrored from the wild - yadavnikhil17102004/CVE_Map_hehe

A modular suite for large-scale threat hunting, stealth recon, and exploit discovery. - jakeloai/BlackSecurity

🛡️ Static security scanner for Ansible playbooks. 1,090+ rules across 30+ categories covering malicious code, supply-chain risk, IaC misconfiguration, secrets, RCE, and lateral movement. Outputs SA...

Dragnet detection rules — sigma format. Contribute to dragnet-dev/haul-rules-sigma development by creating an account on GitHub.

106 team-reviewed Sigma rules detecting the full Active Directory attack chain: recon, coercion, credential access, lateral movement, persistence and trust abuse. Mapped to MITRE ATT&CK and...

Generate nuclei templates from curl commands + HTTP responses. No AI, no API keys. - SeekAndExploit/nuclei-gen

Honeypot farm emulating vulnerable services based on real CVE PoCs + Nuclei templates — catches attackers scanning for known CVEs - ichigo1vs/cve-honeypot

「🪶」PoC (Proof of concept) of Path traversal + RCE in Apache HTTP Server 2.4.49 - wvverez/CVE-2021-41773-PoC

Learn Windows malware development and defense in Rust with 15 stages covering offense, detection, and AV testing - corabellanonextant92/goodboy-framework

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF - Marven11/Fenjing

Pure-TypeScript Ergo NiPoPoW proof verifier. Browser-compatible. Validated byte-for-byte against ergo-nipopow (sigma-rust). - mwaddip/ergots

AttackMate is an attack orchestration tool that executes full attack-chains based on playbooks. - ait-testbed/attackmate

Collect vulnerability scanner rules (Sigma, YARA, Suricata, ClamAV entries) - aboutcode-data/detection-rules-collector

The security agent that fights back. Watches your Linux server from inside, detects threats with kernel-level eBPF, and stops them with on-device AI. Open-source, self-hosted, dry-run by default. A...

Burp Suite extension that dedupes HTTP history and sends unique requests to Organizer with optional header overrides. - sw33tLie/burp-dedupe

nano nuclei engine. no side effect. Contribute to chainreactors/neutron development by creating an account on GitHub.

template nuclei untuk menemukan kerentanan RCE dan LFI pada Xwiki - BCEVM/xwiki

Parsing of YARA rules into AST and building new rulesets in C++. - avast/yaramod

A YARA & Malware Analysis Toolkit written in Rust. - dwmetz/MalChela