reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

threatest

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

LogonTracer

Concept LogonTracer v2 is a tool to investigate malicious logon by visualizing and analyzing Windows Active Directory event logs. This tool associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which...

guardd

guardd Machine learning driven behavioral anomaly detection for Linux using eBPF + Isolation Forest Guardd collects low-level system events process execution, network activity, aggregates them into time-windowed feature vectors, and detects anomalous behavior using a machine learning model. Guard...

MacOSThreatTrack

MacOS ThreatTrack v2.0 Enhanced security information gathering tool for macOS systems with advanced threat detection capabilities. Description MacOSThreatTrack is a comprehensive bash-based security reconnaissance tool designed for proactive detection of malicious activity on macOS systems. This...

awesome-wazuh

awesome-wazuh Curated list of Wazuh resources, tools, and integrations Wazuh is a free, open-source security monitoring platform for threat prevention, detection, and response. Contents Official Documentation Getting Started Setup Guides Deployment Docker Kubernetes Terraform / OpenTofu Ansible...

osint_toolkit

OSINT Toolkit Warning OSINT Toolkit is not production ready yet. This is an early prototype, that still needs some work to be done. A fullstack web application built for security analysts OSINT Toolkit is a self-hostable, on-demand analysis platform designed for security specialists. It...

manuka

Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...

SkyWrapper

Overview SkyWrapper is an open-source project which analyzes behaviors of temporary tokens created in a given AWS account. The tool is aiming to find suspicious creation forms and uses of temporary tokens to detect malicious activity in the account. The tool analyzes the AWS account, and creating...

strelka

Releases | Documentation | Pull Requests | Issues !Pull...

raxe-ce

Threat Detection for AI Agents Stop prompt injection, jailbreaks, and tool attacks before they execute. 100% local. Sub-5ms rule matching. Free forever. root@kitploit: pip install raxe && raxe scan "Ignore all previous instructions" Requires Python 3.10+ • 515+ rules + ML detection included Built...

laravel-threat-detection

Laravel Threat Detection...

CloudGrappler

CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...

ADTrapper

ADTrapper - Active Directory Security Analysis Platform Professional Active Directory Security Analysis and Threat Detection Platform Transform Windows authentication logs into actionable security insights with advanced threat detection and interactive visualizations Overview ADTrapper is a...

whale-sentinel-services

🐋 Whale Sentinel Services 🔧 Overview Whale Sentinel Services is the centralized backend of the Whale Sentinel threat detection ecosystem. These microservices perform real-time threat detection, agent coordination, DGA analysis, and web attack inspection, enabling deep security observability and...

sage

Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...

honeyLambda

Serverless trap honeyλ - a simple serverless application designed to create and monitor URL honeytokens, on top of AWS Lambda and Amazon API Gateway Slack notifications Email and SMS alerts Load config from local file or Amazon S3 Customize the HTTP response for each token Threat Intelligence...

awesome-rust-security

Awesome Rust Security Rustとコンピュータセキュリティに関する優れたプロジェクトとリソースのキュレーションリスト 目次 ツール Webとクラウドセキュリティ 脆弱性評価 攻撃的セキュリティとレッドチーム 脅威検知とフォレンジック 暗号 アプリケーション 教育 書籍 記事 トーク 類似リスト 貢献 ツール Webとクラウドセキュリティ ペネトレーションテスト sn0int - OSINTフレームワークおよびパッケージマネージャー sniffglue - 安全なマルチスレッドパケットスニファ badtouch - スクリプト可能なネットワーク認証クラッカー...

tirreno

tirreno tirreno is a security framework. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse...