Excalibur

Excalibur will soon be updated to utilize Metasploit over the Bashbunny. Excalibur Excalibur is an Eternalblue exploit based "Powershell" for the Bashbunny project. It's purpose is to reflect on how a "simple" USB drive can execute the 7 cyber kill chain. Excalibur may be used only for...

manuka

Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...

cve-2026-59827-metabase-cyber-range

CVE-2026-59827 — Metabase / H2 Unsafe Deserialization Cyber Range Educational laboratory modeling CVE-2026-59827 GHSA-w95f-x9v9-wv36: unsafe deserialization of H2 query result columns of type OTHER in Metabase. TRAINING ONLY — DO NOT EXPOSE TO THE INTERNET Quick start git clone...

deepdarkCTI

deepdarkCTI Collection of Cyber Threat Intelligence sources from the Deep and Dark Web The official website of the project is https://www.deepdarkcti.com. The aim of this project is to collect the sources, present in the Deep and Dark web, which can be useful in Cyber Threat Intelligence contexts...

InfoSec-Black-Friday

InfoSec Black Friday & Cyber Monday Deals "InfoSec Cares" 2025 Edition All the deals for InfoSec related software/tools this coming Black Friday and Cyber Monday. ALL LINKS UPDATED FOR 2025! Many more incoming... Quick Personal Update After being involved in a car accident and everything going...

catsploit

CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...

stoq

Get Started Documentation Installation Plugin Repository Plugin Documentation Overview stoQ is an automation framework that helps to simplify the mundane and repetitive tasks an analyst is required to do. It enables analysts and DevSecOps teams to quickly transition between different data sources...

cyber-decoy

cyber-decoy A containerized network decoy honeypot that advertises SSH , RDP , and SMB , observes every inbound connection with eBPF , and reverse-proxies each session into an isolated decoy container. The design separates two concerns: 1. Observation. An eBPF TC classifier attached to the broker...

yakit

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language： English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...

browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

CVE-2024-54679

CVE-2024-54679 CVE-2024-54679 - CyberPanel aka Cyber Panel Denial of Service Description A denial of service DoS vulnerability was discovered in Cyber Panel that allows any authenticated user to restart the database by sending requests to the /dataBases/restartMySQL endpoint. This vulnerability...

Tools

Tools Cyber Security Tools SecTools.Org: Top 125 Network Security Tools List of SecTools.Org: Top 125 Network Security Tools - For more than a decade, the Nmap Project has been cataloguing the network security community's favorite tools. Kali Tools Kali Tool List - Kali Linux Tools Listing...

IntelligentProcessLifecycle

IntelligentProcessLifecycle The Intelligent Process Lifecycle of Active Cyber Defenders Description This github hosts the poster related files of false positive and error categories in security operation services. The goal is to define an open source reporting standard for Security Operation Cent...

amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

python-certifi

Certifi: Python SSL Certificates Certifi provides Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project. Installation certifi is available on PyP...

Cyber-Library

Cyber Library Learn cybersecurity, from the foundations up. A structured, community-maintained knowledge base: six tracks, one tree, from how a network works to how an attacker thinks. Read the library → · Browse the structure · Connect your assistant ⭐ If the library helps you, star the repo...

cyph

Cyph Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use. Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat an...

awesome-industrial-control-system-security

awesome-industrial-control-system-security A curated list of resources related to Industrial Control System ICS security. Feel free to contribute. Tools AttkFinder | AttkFinder is a tool that performs static program analysis of PLC programs, and produce Data-oriented Attack vectors. In a nutshell...

Pegasus-Gram

Pegasus-Gram – Advanced Keylogger and Cyber Monitoring Suite 🕵️‍♂️ Author: Letda Kes dr. Sobri, S.Kom 📧 Contact: [email protected] 🐙 GitHub: github.com/sobri3195 💰 Support the Project: Donate via Lynk.id Pegasus-Gram is a Python-based advanced keylogger and cyber surveillance tool integrated...

BlueCloud

Overview Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically and quickly deploys a small HELK +...