hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.
☆41Sep 20, 2026Updated 3 weeks ago
Alternatives and similar repositories for hunt-md
Users that are interested in hunt-md are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Multi-EDR & SIEM mock server. SentinelOne, CrowdStrike, Defender, Elastic, Cortex XDR, Splunk, M365 and Sentinel — 8 platforms in one pro…☆55Updated this week
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆81Sep 30, 2026Updated 2 weeks ago
- bin2json extract recursively file, directory of files (or disk dump) metadata to json☆12Jul 7, 2022Updated 4 years ago
- A one-page reference for AI risk, built to widen the conversation before formal assessment. Organized by who owns the risk, with every fa…☆54Oct 11, 2026Updated last week
- [ARCHIVED] Public objects moved to OpenTideHQ/library☆17Sep 9, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Portable passive hostname reconnaissance through Shodan CTL☆40Sep 5, 2026Updated last month
- ☆51Aug 17, 2026Updated 2 months ago
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆27Feb 14, 2026Updated 8 months ago
- A public collection of EVM exploit proof-of-concept (PoC) archives for security research, education, and tooling. These PoCs are generat…☆29Updated this week
- Open-Source autonomous security operations and red teaming agent built to help defenders investigate threats, analyze vulnerabilities, as…☆36Jun 25, 2026Updated 3 months ago
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆13Mar 14, 2026Updated 7 months ago
- Wazuh MCP Server: AI-Driven SOC Automation☆92Updated this week
- An Open Harness and Benchmark for AI in Cybersecurity Operations.☆66Updated this week
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆113Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Updated this week
- The HTTP/2 CLI for finding tiny timing differences and winning request races☆82Sep 24, 2026Updated 3 weeks ago
- A self-editable nsite. One HTML file that edits and republishes itself, hosted on Nostr.☆35Oct 9, 2026Updated last week
- A fully client-side chat application with AI capabilities running entirely in your browser. No servers, complete privacy, and persistent …☆15Mar 14, 2025Updated last year
- A mempool listener for contract specific transactions.☆13Sep 22, 2026Updated 3 weeks ago
- An analytical framework for network traffic and behavioral analytics☆22Feb 23, 2023Updated 3 years ago
- APISignature is a plugin for x64dbg that help the malware analysts & reverse engineers during analysis by adding a reference for more tha…☆38Aug 15, 2026Updated 2 months ago
- Corgea's rule-based SAST scanner☆286Updated this week
- Automate Checkmarx Scanning and Onboarding Plus AWS Access☆12Jan 5, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆453Updated this week
- AI coding skills for Microsoft Agent 365 — transform agents into AI Teammates with Teams hosting, WorkIQ MCP tools, and OTel observabilit…☆50Updated this week
- Command-line tool to identify useragents that bypasses proxy restrictions☆14Sep 29, 2026Updated 2 weeks ago
- AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD…☆215Sep 25, 2026Updated 3 weeks ago
- A curated collection of offensive, defensive and AI/LLM security tools.☆179Oct 11, 2026Updated last week
- A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full of…☆43Updated this week
- Advanced Threat Hunting: Ransomware Group☆29Jul 9, 2025Updated last year
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Sep 1, 2026Updated last month
- P-BitM is a containerized platform for controlled and weaponized Browser-in-the-Middle☆42Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.☆173Jul 31, 2026Updated 2 months ago
- Inspect. Intercept. Modify. A lightweight, browser-native Chrome MV3 extension for authorized HTTP interception and testing.☆39Sep 8, 2026Updated last month
- BrowserClaw - Control your everyday Chrome browser from AI agents, without losing logins or focus☆33Updated this week
- List of AI Security benchmarks☆37Oct 10, 2026Updated last week
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆16Apr 4, 2023Updated 3 years ago
- Collection of useful pre-compiled .NET binaries or other executables for penetration testing Windows Active Directory environments☆14Aug 2, 2024Updated 2 years ago