6132 matches found
galah
TL;DR: Galah /Ι‘ΙΛlΙΛ/ - pronounced βguh-laaβ is an LLM-powered web honeypot designed to mimic various applications and dynamically respond to arbitrary HTTP requests. Galah supports major LLM providers, including OpenAI, GoogleAI, GCP's Vertex AI, Anthropic, Cohere, and Ollama. Unlike traditional...
gosec
gosec - Verificador de Seguridad de Go Inspecciona el cΓ³digo fuente en busca de problemas de seguridad escaneando el AST de Go y la representaciΓ³n de cΓ³digo SSA. Enlaces rΓ‘pidos GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats CaracterΓsticas Regla...
gosec
gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...
2026-100DaysofYARA
100 Days of YARA 2026 A personal challenge to write one YARA rule every day for 100 days as part of the 100DaysofYARA initiative. More info here: https://github.com/100DaysofYARA/2026...
sigint-hombre
sigint-hombre Author: John Page β malvuln aka hyp3rlinx Copyright c 2026 Purpose: Generate derived Suricata detection rules from live URLhaus threat indicators at runtime and deploy them to the Security Onion platform for high-coverage real-time network monitoring. Current Version v2.0 β’ Major...
custom-bytecode-analyzer
custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage root@kitploit: usage: java -jar cba-cli.ja...
fail2ban
root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: bloquear hosts que causan mΓΊltiples errores de autenticaciΓ³n Fail2Ban examina archivos de registro como /var/log/auth.log y bloquea direcciones IP que realizan demasiados intentos de inicio de sesiΓ³n...
easywall
easywall Your firewall. Your rules. No surprises. Live demo Β· Documentation Β· Changelog nftables through a web interface that cannot lock you out: every apply reverts itself unless you confirm it. !The easywall dashboard: firewall status with acceptance state, pending changes and last apply; tile...
pingback
Pingback C2 Detection A Zeek package and Suricata rules for detection of ICMP ping tunnels created by the Pingback C2 tool. Accompanying blog post: https://corelight.blog/2021/05/07/pingback-icmp-tunneling-malware/ Installation The easiest way to install this package is through zkg: zkg install...
ThreatHound
ThreatHound ThreatHound is an advanced cybersecurity tool designed to facilitate efficient threat detection and analysis, windows events logs. it offers a user-friendly interface for managing and analyzing security data. Key features include log analysis, Sigma rule integration, and real-time...
azure-sentinel-detection-engineering
Azure Sentinel Detection Engineering Detection engineering on a live Microsoft Sentinel and Defender XDR environment I operate. Nine custom analytics rules span three planes, each mapped to MITRE ATT&CK and proven end to end: a controlled action triggers the rule, the rule raises an incident, and...
2026
100 Days of YARA 2026 Welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! For now, any associated blogging, walkthroughs, or other musing can be hoste...
suricata-vedas
Suricata VEDAS VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs Purpose This repository serves as an open, collaborative validation space for Suricata rules generated autonomously by ARPSyndicate's Vulnerability & Exploit Data Aggregation System VEDAS. While such AI enables rapid,...
certgraveyard_yara
CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features π Daily Updates : Automatically checks CertGraveyard for new compromised certificates π YARA Rule Generation : Creates individual YARA rules for each certificate β ...
pulledpork
PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...
burp_global_match_replace
Global Match & Replace GMR Burp Suite Extension Global Match & Replace GMR extends Burp Suite with match/replace rules to apply globally or across multiple tools of your choice Repeater, Intruder, Proxy, etc.. It provides per-request and response diffs so you can see exactly what changed. This...
hayabusa
Windows event log fast forensics timeline generator and threat hunting tool. Written in memory-safe Rust by Yamato Security β the only open-source tool with full Sigma support, including v2 correlation rules. !https://img.shields.io/badge/SINCON%20Kampung%20Wor...
MalwareTracesGenerator
MalwareTracesGenerator Generate malware traces for detection tests Report Bug Β· Request Feature π Table of content π Table of content π About the project β Why π Getting started βοΈ Prerequisites π¦ Installation π₯· Quick examples π· Contributing π Acknowledgments π Licenses π About the project...
EventHorizon
EventHorizon EventHorizon is a tool meant to arm security analysts and/or researchers with Event Tracing for Windows ETW telemetry that, coupled with sigma-like rules, allow for robust endpoint detection and response capabilities. That being said, EventHorizon is in no way a replacement for prope...
whonow
Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...