0x9f99

ant-design

An enterprise-class UI design language and React UI library

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

sigma

Main Sigma Rule Repository

awesome-incident-response

A curated list of tools for incident response

cve

Gather and update all available and newest CVEs with their PoC.

gost

GO Simple Tunnel - a simple tunnel written in golang

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

sysmon-modular

A repository of sysmon configuration modules

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

detection-rules

Phant0m

Windows Event Log Killer

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Security-Datasets

Re-play Security Events

w5

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

vscan

开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

OSSEM

Open Source Security Events Metadata (OSSEM)

car

Cyber Analytics Repository

spp

A simple and powerful proxy

Aurora-Incident-Response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

ATTACK-Python-Client

Python Script to access ATT&CK content available in STIX via a public TAXII server

WebLogic-Shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

bmc-tools

RDP Bitmap Cache parser

attack-stix-data

STIX data representing MITRE ATT&CK

AtomicPurpleTeam

Atomic Purple Team Framework and Lifecycle

atc-data

Actionable data for Security Operations