Laboratory for those who are interested in learning about web security

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

NGINX with NAXSI, SSL SNI and GeoIP docker image

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

A repository full of malware samples.

Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine

Proof of concept for CVE-2019-0708

Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!

Malware samples for analysis, researchers, anti-virus and system protection testing.(1600+ Malware-samples!)

OpenVAS Rep

Golang-based SDK to CrowdStrike's APIs

The FLARE team's open-source tool to identify capabilities in executable files.

PowerShell for CrowdStrike's OAuth2 APIs

Collection of Cyber Threat Intelligence sources from the deep and dark web

Damn Vulnerable Web Application (DVWA)

PowerShell Scripts, Tools, and Modules

A decryptor for systems infected by Avaddon ransomware.

Wazuh - Docker containers

Docker Compose for Elasticsearch and Kibana

Repository of YARA rules made by McAfee ATR Team

A curated list of awesome threat detection and hunting resources

Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices

A collection of Linux Sysadmin Test Questions and Answers. Test your knowledge and skills in different fields with these Q/A.

🐳 Elastic Stack (ELK) on Docker, with preconfigured Security, Tools, Self-Monitoring, and Prometheus Metrics Exporters.