0x9f99

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

gost

GO Simple Tunnel - a simple tunnel written in golang

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

attack-stix-data

STIX data representing MITRE ATT&CK

Aurora-Incident-Response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

atc-data

Actionable data for Security Operations

Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

cve

Gather and update all available and newest CVEs with their PoC.

w5

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

Security-Datasets

Re-play Security Events

OSSEM

Open Source Security Events Metadata (OSSEM)

ATTACK-Python-Client

Python Script to access ATT&CK content available in STIX via a public TAXII server

sysmon-modular

A repository of sysmon configuration modules

awesome-incident-response

A curated list of tools for incident response

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

vscan

开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

detection-rules

sigma

Main Sigma Rule Repository

AtomicPurpleTeam

Atomic Purple Team Framework and Lifecycle

car

Cyber Analytics Repository

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

bmc-tools

RDP Bitmap Cache parser

WebLogic-Shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

spp

A simple and powerful proxy

Phant0m

Windows Event Log Killer

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

ant-design

An enterprise-class UI design language and React UI library