A collection of sources of documentation, as well as field best practices, to build/run a SOC

Unsafe Unpacking Vulnerability: Lab Code, Semgrep Rules and Secure Implementation Guide

LLM Agent and Evaluation Framework for Autonomous Penetration Testing

Playbooks for SOC Analysts

🌀 Embeddable remote browser isolation with vettable source https://dosaygo.com

A collaborative, multi-platform, red teaming framework

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potent…

Extract and execute a PE embedded within a PNG file using an LNK file.

SOCFortress CoPilot

Awesome Docker Compose samples

Automated Adversary Emulation Platform

Opensource IDE For Exploring and Testing Api's (lightweight alternative to postman/insomnia)

🕸️ Web apps in pure Python 🐍

APT & CyberCriminal Campaign Collection

⚠️ malware development

DNS-Blocklists: For a better internet - keep the internet clean!

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

OpenCTI Connectors

Indicators from Unit 42 Public Reports

OpenCTI Docker deployment helpers

The osTicket open source ticketing system official project repository, for versions 1.8 and later

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

Agola: CI/CD Redefined

Get up and running with Llama 3.3, DeepSeek-R1, Phi-4, Gemma 3, and other large language models.

Primary Block Lists

A community-supported supercharged version of paperless: scan, index and archive all your physical documents

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

Easy & Flexible Alerting With ElasticSearch

YARA signature and IOC database for my scanners and tools

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️