misp-objects

misp-objects MISP objects used in MISP system and can be used by other information sharing tools. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases...

how-to-bypass-aslr-on-linux-x86_64

Breaking 64 bit aslr on Linux x86-64 In this article, I'll discuss about the application of the technique described by Samuel Groß in his Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass, to bypass ASLR on Linux x8664. To show this I'm gonna solve a...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...

awesome-security

Awesome Security A collection of awesome software, libraries, documents, books, resources and cool stuff about security. Inspired by awesome-php, awesome-python. Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven...

Scanners-Box

English | 简体中文 | Español Introduction Scanners Box is a curated arsenal of 9,000+ ⭐ open-source cybersecurity treasures — with a special focus on AI-driven automated security agents and Red Team / Blue Team tooling. All tools feature source code available , covering 10+ categories from subdomain...

hacktricks

HackTricks Hacktricks logos & motion design by @ppieranacho . Run HackTricks Locally root@kitploit: Download latest version of hacktricks git clone https://github.com/HackTricks-wiki/hacktricks Select the language you want to use export LANG="master" Leave master for english "af" for Afrikaans "d...

clair

Clair Note : The main branch may be in an unstable or even broken state during development. Please use releases instead of the main branch in order to get stable binaries. Clair is an open source project for the static analysis of vulnerabilities in application containers currently including OCI...

FIR

What is FIR? Who is it for? FIR Fast Incident Response is an cybersecurity incident management platform designed with agility and speed in mind. It allows for easy creation, tracking, and reporting of cybersecurity incidents. FIR is for anyone needing to track cybersecurity incidents CSIRTs, CERT...

Rawsec-website

RawSec Static website hosted on GitLab Pages Topics & Tags : Security Cybersecurity, Linux, News, System, Virtualization, ... Dev Install the required version of nodejs with nodenv. Then install the hexo cli tool: root@kitploit: $ npm install -g hexo-cli Then install dependencies: root@kitploit: ...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

cset

CSET이란 무엇인가? 사이버보안 및 인프라 보안국CISA과 아이다호 국립 연구소INL는 국가 중요 인프라에 대한 위험을 줄이기 위한 주요 목표로 자산 소유자를 위해 사이버 보안 평가 도구CSET®를 개발합니다. 제어 시스템은 물리적 프로세스를 제어하는 전자 장치로 정의되며, 따라서 국가 인프라 보호에 중요한 요소입니다. CSET은 사용자를 단계별 프로세스로 안내하여 하드웨어, 소프트웨어, 관리 정책 및 사용자 의무와 같은 주제를 다루는 시설별 정보를 수집하는 무료 소프트웨어 도구입니다. 그런 다음 해당 정보를 관련 보안 표준...

Exegol

Exegol은 공격 보안 전문가들이 동료 해커 및 커뮤니티를 위해 설계한 포괄적인 사이버 보안 환경입니다. 현장에서 바로 사용할 수 있는 모듈형이고 신뢰할 수 있는 툴킷을 제공하여 기존 보안 배포판의 일반적인 문제점을 해결합니다. 프로젝트에 대해 더 알고 싶으신가요? exegol.com으로 이동하세요. 시작하기 Exegol 설치 방법: exegol.com/install 공식 프로젝트 문서에는 Exegol이 어떻게 구성되어 있는지 자세히 설명되어 있습니다. docs.exegol.com으로 이동하세요...

cai

사이버보안 AI CAI...

Anthropic-Cybersecurity-Skills

Anthropic Cybersecurity Skills The largest open-source cybersecurity skills library for AI agents !Hermes Agenthttps://img.shields...

Awesome-LLM4Cybersecurity

When LLMs Meet Cybersecurity: A Systematic Literature Review 🔍 Explore 756+ Papers Across 11 Research Categories 📊 RQ1: Domain LLMs | 🎯 RQ2: Applications | 🤖 RQ3: Future Directions Updates 📆2026-06-15 We have updated the related papers up to 2026/06/15 , with 108 new papers added. 📆2026-02-09 We...

CyberStrikeAI

CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...

witchcraft

🎉 Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual 🎉 What it does? WITCHCRAFT Are much more than a simple alias, it's a init system that can works with busybox, a shell and automation's and automation's engine for hacking, osint, forensics, etc. NAME witchcra...

Cybersecurity-Projects

Cybersecurity Projects 🐉 70 Cybersecurity Projects, Certification Roadmaps & Resources Made possible by CertGames...

Red-Teaming-TTPs

!CAUTION This repository contains cheatsheets, notes, and scripts related to my learning in cybersecurity, particularly Red Teaming. You'll find a variety of resources that I've compiled over the years, including: Cheatsheets : Quick reference guides for common tools and techniques. Guides :...

nogotofail

nogotofail Nogotofail is a network security testing tool designed to help developers and security researchers spot and fix weak TLS/SSL connections and sensitive cleartext traffic on devices and applications in a flexible, scalable, powerful way. It includes testing for common SSL certificate...