MCP to help Defenders Detection Engineer Harder and Smarter

A collection of companies that disclose adversary TTPs after they have been breached

Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more

the LLM vulnerability scanner

Damn Vulnerable MCP Server

Official AWS MCP Servers

KQL Queries. Microsoft Defender, Microsoft Sentinel

Collection of example YARA-L rules for use within Google Security Operations

A simple threat modeling tool to help humans to reduce time-to-value when threat modeling

Jlama is a modern LLM inference engine for Java

The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).

List of changes announced for AWS that may break existing code

A repository of curated datasets from various attacks

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Tool for building Kubernetes attack paths

Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation of repeatable detection samples in the cloud. Built on Google…

All Jupyter notebooks to create a management cluster

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

Antivirus for your mind

Phoenix AMTD Operator for Kubernetes

Docker Container for Elastic Detection CLI

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident resp…

📦 The official Nextcloud installation method. Provides easy deployment and maintenance with most features included in this one Nextcloud instance.

Config files for my GitHub profile.

Built-in Panther detection rules and policies