Helping defenders learn and validate npm supply-chain detections with safe atomic tests.
☆35Oct 30, 2025Updated 11 months ago
Alternatives and similar repositories for NPM-Threat-Emulation
Users that are interested in NPM-Threat-Emulation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 8 months ago
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- Sparkle - LLM Honeypot for Security Research☆14Jul 28, 2026Updated 2 months ago
- surface-watch monitors the authorized external attack surface of an organization over time☆55May 11, 2026Updated 5 months ago
- For testing or trolling LLM based pentesting frameworks.☆20Feb 18, 2026Updated 8 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- Convert PromptIntel & MoltThreats feeds into Nova Framework detection rules☆15Sep 16, 2026Updated last month
- EAA is a curated catalog of techniques and real-world cases involving abuse of local AI agents through their runtime, configuration, stat…☆94Oct 3, 2026Updated 3 weeks ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆84Sep 30, 2026Updated 3 weeks ago
- Powershell Functions to interact with TheHive-Project☆11Jun 27, 2019Updated 7 years ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆121Updated this week
- Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI …☆19Jul 21, 2026Updated 3 months ago
- ☆16Dec 16, 2020Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- An autonomous Digital Forensics & Incident Response toolkit built on Claude's skill and MCP ecosystem☆17Mar 24, 2026Updated 7 months ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 4 years ago
- ☆13Feb 12, 2026Updated 8 months ago
- Framework-agnostic log sanitizer for browsers and Node.js. Redacts secrets and infrastructure identifiers with stable HMAC tokens so even…☆47Oct 14, 2026Updated last week
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆288Updated this week
- Ludus range for the Constructing Defense Lab☆139Jul 28, 2026Updated 2 months ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆158Updated this week
- how to strangle threats☆69Updated this week
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated 2 years ago
- Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing vu…☆36Oct 10, 2026Updated 2 weeks ago
- Browse and diff ETW provider snapshots across Windows builds. Backed by ETWInspector.☆40Sep 9, 2026Updated last month
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 9 months ago
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆129Updated this week
- PowerShell tools to help defenders hunt smarter, hunt harder.☆490Oct 29, 2025Updated 11 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆502Jun 16, 2026Updated 4 months ago
- Open-source memory forensics platform for DFIR, threat hunting, malware analysis, and incident response.☆29Oct 5, 2026Updated 2 weeks ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆381Sep 8, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Malicious skills for testing skill scanners☆44Jun 3, 2026Updated 4 months ago
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆75Jun 17, 2026Updated 4 months ago
- Slides and resources from MCTTP 2025 Talk☆70Oct 26, 2025Updated last year
- Cobalt Strike notifications via NTFY.☆15Sep 24, 2024Updated 2 years ago
- Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025☆38Nov 22, 2025Updated 11 months ago
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated 2 months ago
- SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service☆31Aug 29, 2026Updated last month