☆24Oct 8, 2025Updated last year
Alternatives and similar repositories for Threat-Hunting-Docker-Lab
Users that are interested in Threat-Hunting-Docker-Lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆26Feb 18, 2025Updated last year
- A portfolio demonstrating advanced blue and red team skills, including: SSH MFA implementation, Volatility-based memory forensics to dete…☆24Oct 19, 2025Updated last year
- Simple roadmap for "Post Exploitation"☆16Jul 12, 2025Updated last year
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated 11 months ago
- A PoC Cobalt Strike UDRL written in Rust☆34Sep 12, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆47Oct 20, 2025Updated last year
- IoCs and YARA rules from Threatray's Threat Research☆23Oct 20, 2026Updated last week
- DFIR LABS - A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital For…☆660Sep 20, 2026Updated last month
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 7 months ago
- Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.☆20Jan 22, 2026Updated 9 months ago
- Sigma rules converted for direct use with Zircolite☆15Updated this week
- This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output,…☆19Nov 19, 2025Updated 11 months ago
- ☆21Oct 22, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆61Feb 18, 2026Updated 8 months ago
- Finding Missing People, extract information in Dark Web and Surfaceweb Investigation and Human Trafficking Support☆36May 29, 2024Updated 2 years ago
- A Qemu Proxmox Template builder project using Packer☆76Dec 5, 2025Updated 10 months ago
- Forensic Browser History Analyzer - Cross-platform browser history extractor (Chrome, Firefox, IE/Edge, Brave, Opera, Vivaldi)☆38Sep 27, 2026Updated last month
- HackMap — a local pentest mapping tool with real-time command execution, persistent history per target, visual attack paths, and one-clic…☆53Oct 23, 2026Updated last week
- Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast☆21Oct 5, 2025Updated last year
- Baseline a Windows System against LOLBAS☆77Jun 5, 2026Updated 4 months ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows Defender Manager is a tool that helps stop Windows Defender. It works with the Antimalware Service Executable of all versions of …☆46Jan 18, 2025Updated last year
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆50Aug 13, 2025Updated last year
- Curated, simulated dataset of security logs (Windows, Web, Firewall, Cloud) with embedded attack vectors for SOC analysts to practice SIE…☆35Oct 22, 2026Updated last week
- Detonate redteam tools on VMs and get logs & detection status☆107Updated this week
- 🐐 GoatOS - A lightweight Linux distribution focused on Web & API penetration testing. Built on Debian with GNOME, featuring nuclei, http…☆18Dec 26, 2025Updated 10 months ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆50Oct 24, 2025Updated last year
- ☆122May 26, 2025Updated last year
- This tool extracts hidden metadata from online documents (PDF, Word, Excel, Images) to reveal information about the document's origin, au…☆28Sep 4, 2025Updated last year
- Full write-up for the Active Directory Lab built for Barbhack 2025 by @mpgn and my contributions.☆24Sep 2, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆25Mar 4, 2026Updated 7 months ago
- Windows anti-forensics module☆27Jul 27, 2026Updated 3 months ago
- C programs for sockets, reverse shell, shellcode execution, and process injection.☆25Dec 10, 2025Updated 10 months ago
- YARA Standalone WSS is an offline webshell scanning tool that uses YARA rules to detect malicious or suspicious files in webroot director…☆13Aug 4, 2025Updated last year
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆34Aug 4, 2026Updated 2 months ago
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Capture incoming TGTs in pure PowerShell to avoid using Rubeus☆30Mar 29, 2026Updated 7 months ago