Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion to your preferred editor once it is configured.

Hash Query Language (Hql)

Kusto Query Language is a simple and productive language for querying Big Data.

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

de-pixelate youtube video gaV-O6NPWrI

SSH based reverse shell

CLI generator for Velociraptor offline collector

Open-source security automation platform for teams and AI agents

A repository to share publicly available Velociraptor detection content

monitor and protect SSH sessions with eBPF

A preconfigured Velociraptor triage collector

Rust implementation of the Microsoft Remote Desktop Protocol (RDP)

The official firmware for Meshtastic, an open-source, off-grid mesh communication system.

dmrshark analyses the traffic, and adds extra features to a Hytera IPSC network.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers…

A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies

Because AV evasion should be easy.

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

Python tool for converting files and office documents to Markdown.

Examine Chrome extensions for security issues

Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/…

OpenScanner FWs

Map editor for the Game Animal Well

A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 …

Network analysis tool for Attack Defence CTF

A minimal Jekyll theme

detect stegano-hidden data in PNG & BMP

Pre-Built Vulnerable Environments Based on Docker-Compose

Phantom Community Playbooks