2906 matches found
hacksguard
Hacksguard 0.2 - Blazing Fast TUI Malware Analysis Tool 🛡️ Hacksguard is a blazingly fast, multi-threaded Terminal UI TUI static analysis tool designed for SOC analysts, threat hunters, and reverse engineers. Built entirely in Rust, it provides an intuitive dashboard for quick triage and deep...
freevulnsearch
freevulnsearch This NMAP NSE script is part of the Free OCSAF project - https://freecybersecurity.org. In conjunction with the version scan "-sV" in NMAP, the corresponding vulnerabilities are automatically assigned using CVE Common Vulnerabilities and Exposures and the severity of the...
zabbix-threat-control
Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...
gp_netSecDSS
netSecDSS Decision Support System for Risk Assessing Network and System Security in SMEs A Docker-based network security monitoring platform built for small and medium enterprises that can't afford commercial SIEM tools. It simulates a realistic multi-subnet SME network, runs staged attack...
Ledger
Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...
metahub
MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...
leakish
Leakish Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser. Built withVerdent — an agentic coding assistant. Every detection module, the analytics dashboard, the API-key auth flow, the bilingual UI and the Kubernetes-ready Docker...
c-sentinel
C-Sentinel Semantic Observability for UNIX Systems A lightweight, portable system prober written in C that captures "system fingerprints" for AI-assisted analysis of non-obvious risks. Features auditd integration, explainable risk scoring, and a live web dashboard with enterprise-grade multi-user...
cve-mcp-server
🛡️ CVE MCP 服务器 AI 驱动的安全情报触手可及——28 个工具 + 一键triagecve 编排器，24 个数据源，一个协议。 一个生产级别的模型上下文协议（MCP）服务器 ，将 Claude 变成全能的安全分析师。无需在 NVD、EPSS、CISA KEV、Shodan、VirusTotal 和 GreyNoise 之间切换 15 个以上的浏览器标签页，只需向 Claude 提出一个问题，即可在数秒内获得关联情报。基于 Python、FastMCP、httpx、aiosqlite、Pydantic v2 和 defusedxml 构建。 问题所在： 对单个 CVE...
confusable-vision
confusable-vision The world's first font-by-font confusables dataset. Which Unicode characters look like which, measured from the fonts' outlines rather than from pixels. The current release, 2026.09.26, compares every letter and digit that each of 322 fonts draws, at the size and baseline positi...
scoringengine
评分引擎 评分引擎是一个开源平台，用于运行红队/白队/蓝队网络安全竞赛。它能自动化每轮的服务检查，并提供基于Web的计分板与配置界面。 特性 自动化调度和执行服务检查 通过Celery worker和Redis实现分布式并行执行 用于查看分数和配置服务的Web界面 用于程序化访问分数和配置的JSON API 内置28种服务检查（SSH、HTTP、DNS、SMTP等） 支持离线/隔离网络部署 带预置演示数据的示例模式 架构 评分引擎采用分布式架构，包含以下组件： 组件| 技术| 用途 ---|---|--- Web UI| Flask| 计分板、团队管理、管理 任务队列| Celery|...
CVE_Prioritizer
CVE Prioritizer CVE Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, CISA's Known Exploited Vulnerabilities and VulnCheck's community resources NVD++, KEV. It provides valuable insights into the likelihood of exploitation and the potential...
catsploit
CATSploit🐈 CATSploit 是一款利用网络安全攻击技术评分（CATS）方法的自动化渗透测试工具，无需渗透测试人员即可使用。 目前，渗透测试人员通常隐含地为待攻击的目标系统选择合适的攻击技术。 CATSploit 利用扫描器收集的系统配置信息（如操作系统、开放端口、软件版本），并为每个攻击技术计算针对目标系统的捕获得分（eVc）和可检测性得分（eVd）。 通过选择最高得分值，无需黑客技巧（专业渗透测试人员的技能）即可选出最适合目标系统的攻击技术。 CATSploit 按以下顺序自动执行渗透测试： 1. 信息收集与先验信息输入 首先，收集目标系统的信息。CATSploit 支持...
catsploit
CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...
PowerShellProfiler
PowerShellProfiler El código de este proyecto proviene de https://github.com/pan-unit42/publictools/tree/master/powershellprofiler Introducción PowerShellProfiler.py es un script para analizar estáticamente scripts de PowerShell mediante la desofuscación y normalización del contenido, que luego s...
CTFd
¿Qué es CTFd? CTFd es un framework de Capture The Flag centrado en la facilidad de uso y la personalización. Incluye todo lo que necesitas para organizar un CTF y es fácil de personalizar con plugins y temas. Características Crea tus propios retos, categorías, pistas y flags desde la interfaz de...
systempi
systempi Real-time Raspberry Pi system monitoring dashboard for Linux terminals with live telemetry, hardware health analysis, and low-flicker rendering. FEATURES Real-time CPU, RAM, swap, disk, and network monitoring Raspberry Pi hardware telemetry through vcgencmd Power, throttling, undervoltag...
log-horizon
Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...
ONUS
ONUS - Evaluación Automatizada de Vulnerabilidades y Pruebas de Penetración Creado por maverickaayush. Una herramienta VAPT autoalojada y aislada de la red: apúntala a un dominio objetivo autorizado y ejecuta 8 módulos de escaneo en paralelo, puntúa de forma determinista cada hallazgo CVSS v3.1,...