SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• UpdatedNov 5, 2025
• Go

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

• UpdatedFeb 19, 2026
• Python

E-mails, subdomains and names Harvester - OSINT

• UpdatedFeb 20, 2026
• Python

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

• UpdatedFeb 12, 2026
• YAML

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

• UpdatedDec 6, 2025
• XSLT

Cyber Security ALL-IN-ONE Platform

• UpdatedFeb 11, 2026
• TypeScript

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

• UpdatedDec 20, 2025
• Python

A collection of awesome security hardening guides, tools and other resources

• UpdatedJan 20, 2026

An Information Security Reference That Doesn't Suck;https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

• UpdatedOct 20, 2025
• CSS

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

• UpdatedJun 6, 2024
• C++

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

• UpdatedNov 18, 2025
• HTML

Tools and Techniques for Blue Team / Incident Response

• UpdatedMar 27, 2025

Snoop — инструмент разведки на основе открытых данных (OSINT world)

• UpdatedFeb 17, 2026
• Python

Rapidly Search and Hunt through Windows Forensic Artefacts

• UpdatedFeb 14, 2026
• Rust

Investigate malicious Windows logon by visualizing and analyzing Windows event log

• UpdatedOct 19, 2025
• Python

Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.

• UpdatedOct 27, 2021

HardeningKitty and Windows Hardening Settings

• UpdatedFeb 14, 2026
• PowerShell

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

• UpdatedDec 11, 2025
• Java

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• UpdatedJan 12, 2026
• Go

Adversary tradecraft detection, protection, and hunting

• UpdatedFeb 20, 2026
• Go