APT | GitHub 红队武器库🚨

🚨 GitHub 监控消息提醒🚨 发现关键词： #YARA #rule #rules #APT #malware📦 项目名称： SIEM-WAZUH👤 项目作者： dan2022005🛠 开发语言： Unknown⭐ Star数量： 2 | 🍴 Fork数量： 0📅 更新时间： 2026-06-13 07:55:03📝 项目描述：Triển khai hệ thống SIEM bằng Wazuh nhằm phát hiện, và ứng phó với các mối đe dọa an ninh mạng. Hệ thống tích hợp Suricata và Yara để giám sát tính toàn vẹn của tệp, phát hiện và tự động ngăn chặn dò quét mật khẩu, dò quét mạng và phát hiện phần mềm độc hại.🔗 点击访问项目地址

Sat, 13 Jun 2026 08:07:47 GMT

🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule #rules #APT #malware

📦 项目名称： SIEM-WAZUH
👤 项目作者： dan2022005
🛠 开发语言： Unknown
⭐ Star数量： 2 | 🍴 Fork数量： 0
📅 更新时间： 2026-06-13 07:55:03

📝 项目描述：

Triển khai hệ thống SIEM bằng Wazuh nhằm phát hiện, và ứng phó với các mối đe dọa an ninh mạng. Hệ thống tích hợp Suricata và Yara để  giám sát tính toàn vẹn của tệp, phát hiện và tự động ngăn chặn dò quét mật khẩu, dò quét mạng và phát hiện phần mềm độc hại.

🔗 点击访问项目地址

GitHub

GitHub - dan2022005/SIEM-WAZUH: Triển khai hệ thống SIEM bằng Wazuh nhằm phát hiện, và ứng phó với các mối đe dọa an ninh mạng.…

Triển khai hệ thống SIEM bằng Wazuh nhằm phát hiện, và ứng phó với các mối đe dọa an ninh mạng. Hệ thống tích hợp Suricata và Yara để giám sát tính toàn vẹn của tệp, phát hiện và tự động ngăn chặn...

🚨 GitHub 监控消息提醒🚨 发现关键词： #威胁情报 #APT📦 项目名称： zhuzhao👤 项目作者： Shaw403🛠 开发语言： JavaScript⭐ Star数量： 2 | 🍴 Fork数量： 1📅 更新时间： 2026-06-12 10:03:11📝 项目描述：烛照 - Chrome 安全扩展，基于 SnowEyes 二次开发，新增主动指纹嗅探、威胁情报检索、编解码加解密、JS加密绕过Web爆破🔗 点击访问项目地址

Fri, 12 Jun 2026 10:06:56 GMT

🚨 GitHub 监控消息提醒

🚨 发现关键词： #威胁情报 #APT

📦 项目名称： zhuzhao
👤 项目作者： Shaw403
🛠 开发语言： JavaScript
⭐ Star数量： 2 | 🍴 Fork数量： 1
📅 更新时间： 2026-06-12 10:03:11

📝 项目描述：

烛照 - Chrome 安全扩展，基于 SnowEyes 二次开发，新增主动指纹嗅探、威胁情报检索、编解码加解密、JS加密绕过Web爆破

🔗 点击访问项目地址

GitHub

GitHub - Shaw403/zhuzhao: 烛照 - Chrome 安全扩展，基于 SnowEyes 二次开发，新增主动指纹嗅探、威胁情报检索、编解码加解密、JS加密绕过Web爆破

烛照 - Chrome 安全扩展，基于 SnowEyes 二次开发，新增主动指纹嗅探、威胁情报检索、编解码加解密、JS加密绕过Web爆破 - Shaw403/zhuzhao

🚨 GitHub 监控消息提醒🚨 发现关键词： #YARA #rule #rules #APT📦 项目名称： azul-plugin-retrohunt👤 项目作者： AustralianCyberSecurityCentre🛠 开发语言： Python⭐ Star数量： 0 | 🍴 Fork数量： 0📅 更新时间： 2026-05-30 14:53:29📝 项目描述：AZUL plugins for indexing and querying historical samples with yara queries.🔗 点击访问项目地址

Sat, 30 May 2026 15:07:14 GMT

🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule #rules #APT

📦 项目名称： azul-plugin-retrohunt
👤 项目作者： AustralianCyberSecurityCentre
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-30 14:53:29

📝 项目描述：
AZUL plugins for indexing and querying historical samples with yara queries.

🔗 点击访问项目地址

GitHub

GitHub - AustralianCyberSecurityCentre/azul-plugin-retrohunt: AZUL plugins for indexing and querying historical samples with yara…

AZUL plugins for indexing and querying historical samples with yara queries. - AustralianCyberSecurityCentre/azul-plugin-retrohunt

🚨 GitHub 监控消息提醒🚨 发现关键词： #YARA #rules #APT #malware📦 项目名称： firmaudit👤 项目作者： V33RU🛠 开发语言： Python⭐ Star数量： 0 | 🍴 Fork数量： 0📅 更新时间： 2026-05-28 21:47:09📝 项目描述：Firmware binary security analyzer (NX/PIE/RELRO, CVE/EPSS/KEV, SBOM, YARA) - pure Python, 21-step pipeline🔗 点击访问项目地址

Thu, 28 May 2026 22:02:57 GMT

🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rules #APT #malware

📦 项目名称： firmaudit
👤 项目作者： V33RU
🛠 开发语言： Python
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-28 21:47:09

📝 项目描述：
Firmware binary security analyzer (NX/PIE/RELRO, CVE/EPSS/KEV, SBOM, YARA) - pure Python, 21-step pipeline

🔗 点击访问项目地址

GitHub

GitHub - V33RU/firmaudit: Firmware security analyzer with a web UI + AI co-analyst: binary hardening (NX/PIE/RELRO), CVE/EPSS/KEV…

Firmware security analyzer with a web UI + AI co-analyst: binary hardening (NX/PIE/RELRO), CVE/EPSS/KEV, SBOM generate+ingest, YARA, RTOS detection, radare2-grounded triage. Python, 23-step pipelin...

🚨 GitHub 监控消息提醒🚨 发现关键词： #YARA #rule #rules #APT #malware📦 项目名称： ohmypcap👤 项目作者： dougburks🛠 开发语言： Python⭐ Star数量： 200 | 🍴 Fork数量： 14📅 更新时间： 2026-05-26 10:03:05📝 项目描述：OhMyPCAP is a FOSS web application for analyzing PCAP files using Suricata and other files using YARA. View network alerts and file alerts, browse network metadata (DNS, HTTP, TLS, flows), extract ASCII transcripts, view per-packet hexdumps, and carve individual streams.🔗 点击访问项目地址

Tue, 26 May 2026 11:08:03 GMT

🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule #rules #APT #malware

📦 项目名称： ohmypcap
👤 项目作者： dougburks
🛠 开发语言： Python
⭐ Star数量： 200 | 🍴 Fork数量： 14
📅 更新时间： 2026-05-26 10:03:05

📝 项目描述：

OhMyPCAP is a FOSS web application for analyzing PCAP files using Suricata and other files using YARA. View network alerts and file alerts, browse network metadata (DNS, HTTP, TLS, flows), extract ASCII transcripts, view per-packet hexdumps, and carve individual streams.

🔗 点击访问项目地址

GitHub

GitHub - dougburks/ohmypcap: OhMyPCAP is a FOSS web application for analyzing PCAP files using Suricata and other files using YARA.…

OhMyPCAP is a FOSS web application for analyzing PCAP files using Suricata and other files using YARA. View network alerts and file alerts, browse network metadata (DNS, HTTP, TLS, flows), extract ...

🚨 GitHub 监控消息提醒🚨 发现关键词： #YARA #rule #rules #APT #malware📦 项目名称： mailhook👤 项目作者： izm1chael🛠 开发语言： Go⭐ Star数量： 0 | 🍴 Fork数量： 0📅 更新时间： 2026-05-26 09:39:40📝 项目描述：Self-hosted email security gateway: IMAP IDLE monitoring with Rspamd/ClamAV/YARA/URL-feed scanning, a quarantine workflow, and a web dashboard.🔗 点击访问项目地址

Tue, 26 May 2026 10:00:54 GMT

🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #rule #rules #APT #malware

📦 项目名称： mailhook
👤 项目作者： izm1chael
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-26 09:39:40

📝 项目描述：

Self-hosted email security gateway: IMAP IDLE monitoring with Rspamd/ClamAV/YARA/URL-feed scanning, a quarantine workflow, and a web dashboard.

🔗 点击访问项目地址

GitHub

GitHub - izm1chael/mailhook: Self-hosted email security gateway: IMAP IDLE monitoring with Rspamd/ClamAV/YARA/URL-feed scanning…

Self-hosted email security gateway: IMAP IDLE monitoring with Rspamd/ClamAV/YARA/URL-feed scanning, a quarantine workflow, and a web dashboard. - izm1chael/mailhook

🚨 GitHub 监控消息提醒🚨 发现关键词： #YARA #APT #malware📦 项目名称： gamybear👤 项目作者： yankywilson🛠 开发语言： Go⭐ Star数量： 0 | 🍴 Fork数量： 0📅 更新时间： 2026-05-24 22:50:11📝 项目描述：First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian education and state-authority targets. Static + dynamic analysis with 15 findings extending CERT-UA#18329, including a persistence correction and the

Sun, 24 May 2026 23:07:29 GMT

🚨 GitHub 监控消息提醒

🚨 发现关键词： #YARA #APT #malware

📦 项目名称： gamybear
👤 项目作者： yankywilson
🛠 开发语言： Go
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-05-24 22:50:11

📝 项目描述：

First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian education and state-authority targets. Static + dynamic analysis with 15 findings extending CERT-UA#18329, including a persistence correction and the http.DefaultClient TLS failure. IOCs, YARA, Suricata, Snort, STIX.

🔗 点击访问项目地址

GitHub

GitHub - yankywilson/gamybear: First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian…

First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian education and state-authority targets. Static + dynamic analysis with 15 findings extending CERT-UA#...