mandiant / Vulnerability-Disclosures

Related projects ⓘ

Alternatives and complementary repositories for Vulnerability-Disclosures

• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆239Updated last year
• REW-sploit / REW-sploit
  Emulate and Dissect MSF and *other* attacks
  ☆139Updated 8 months ago
• pan-unit42 / tweets
  ☆130Updated 9 months ago
• jsecurity101 / MSRPC-to-ATTACK
  A repository that maps commonly used attacks using MSRPC protocols to ATT&CK
  ☆308Updated last year
• 3lp4tr0n / BeaconHunter
  Detect and respond to Cobalt Strike beacons using ETW.
  ☆481Updated 2 years ago
• StrangerealIntel / Orion
  A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
  ☆138Updated 11 months ago
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆111Updated 2 years ago
• DidierStevens / Beta
  Beta versions of my software
  ☆245Updated last year
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆164Updated 2 years ago
• michelcrypt4d4mus / yaralyzer
  Visually inspect and force decode YARA and regex matches found in both binary and text data. With Colors.
  ☆105Updated 7 months ago
• netskopeoss / NetskopeThreatLabsIOCs
  ☆90Updated 3 weeks ago
• rajiv2790 / FalconEye
  ☆290Updated 3 years ago
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆124Updated last year
• SafeBreach-Labs / Back2TheFuture
  Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in ord…
  ☆175Updated 3 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• jsecurity101 / TelemetrySource
  ☆221Updated 6 months ago
• ConsciousHacker / WFH
  ☆404Updated 2 years ago
• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆127Updated last year
• fox-it / cobaltstrike-beacon-data
  Open Dataset of Cobalt Strike Beacon metadata (2018-2022)
  ☆122Updated 2 years ago
• volexity / threat-intel
  Signatures and IoCs from public Volexity blog posts.
  ☆315Updated 3 months ago
• lucky-luk3 / Grafiki
  Threat Hunting tool about Sysmon and graphs
  ☆329Updated last year
• pucarasec / zuthaka
  Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and othe…
  ☆174Updated last year
• Te-k / cobaltstrike
  Code and yara rules to detect and analyze Cobalt Strike
  ☆263Updated 3 years ago
• xforcered / WFH
  ☆181Updated 2 years ago
• connormcgarr / Exploit-Development
  ☆294Updated 2 years ago
• carbonblack / active_c2_ioc_public
  Active C2 IoCs
  ☆96Updated last year
• BushidoUK / Exploring-APT-campaigns
  Further investigation in to APT campaigns disclosed by private security firms and security agencies
  ☆80Updated 2 years ago
• mandiant / OfficePurge
  ☆257Updated last year
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆571Updated 6 months ago
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆141Updated 9 months ago