Repositories list

• SecureCICD

  Public

  NextSecurity/SecureCICD’s past year of commit activity
  🔐 Enforce real CI/CD approval integrity — block self-approvals, detect reassigned approvals, and validate trusted approvers at runtime. Built by NextSecurity fo…

  devopsdevops-toolssecurity-automation+ 8

  devopsdevops-toolssecurity-automationdevsecopsruntime-validationdevops-pipelineazure-devopscicd-pr-validationgithub-actionsdevsecops-pipeline+ 1

  Python

  •

  MIT License

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 7, 2025Apr 7, 2025

• malicious-code-samples

  Public

  NextSecurity/malicious-code-samples’s past year of commit activity
  A curated dataset repository of malicious source code samples for security research, red-team testing, and detection tool validation.

  Less

  •

  MIT License

  •11 fork•11 star•00 issues•00 pull requests•Updated Feb 27, 2025Feb 27, 2025

• maltrail

  Public

  NextSecurity/maltrail’s past year of commit activity
  Malicious traffic detection system

  Python

  •

  MIT License

  •1.3k1.3k forks•33 stars•00 issues•11 pull request•Updated Aug 21, 2024Aug 21, 2024

• .github

  Public

  NextSecurity/.github’s past year of commit activity
  00 forks•00 stars•00 issues•00 pull requests•Updated Apr 1, 2024Apr 1, 2024

• VSAT

  Public

  NextSecurity/VSAT’s past year of commit activity
  Virtualization Security Audit Tool - Security assess CIS compliance of a Virtualization environments

  security-auditvmwarevmware-esxi+ 9

  security-auditvmwarevmware-esxixenvirtualizationnutanixsecurity-automationsecurity-toolsvmware-vspherevmware-powercli+ 2

  PowerShell

  •

  MIT License

  •11 fork•1515 stars•00 issues•00 pull requests•Updated Nov 21, 2023Nov 21, 2023

• yara-rules-harvester

  Public

  NextSecurity/yara-rules-harvester’s past year of commit activity
  Shell

  •00 forks•00 stars•00 issues•00 pull requests•Updated Aug 15, 2022Aug 15, 2022

• CVE-2022-30190-follina-Office-MSDT-Fixed

  Public

  NextSecurity/CVE-2022-30190-follina-Office-MSDT-Fixed’s past year of commit activity
  Modified follina Vulnerability - CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

  Python

  •5252 forks•00 stars•00 issues•00 pull requests•Updated Jun 12, 2022Jun 12, 2022

• CVE-2022-30075

  Public

  NextSecurity/CVE-2022-30075’s past year of commit activity
  Modified OT CVE vulnerability over Tp-Link Devices version Archer AX50 Authenticated RCE

  Python

  •4343 forks•00 stars•00 issues•00 pull requests•Updated Jun 8, 2022Jun 8, 2022

• misp-warninglists

  Public

  NextSecurity/misp-warninglists’s past year of commit activity
  Warning lists to inform users of MISP about potential false-positives or other information in indicators

  Python

  •190190 forks•00 stars•00 issues•00 pull requests•Updated Mar 18, 2022Mar 18, 2022

• box-js

  Public

  NextSecurity/box-js’s past year of commit activity
  A tool for studying JavaScript malware.

  JavaScript

  •

  MIT License

  •8888 forks•00 stars•00 issues•00 pull requests•Updated May 30, 2021May 30, 2021

• Awesome-Cloud-Security

  Public
  Awesome curate list of cyber security penetration testing tools for Cloud Security mainly AWS/Azure/Google

  GNU General Public License v3.0

  •3131 forks•128128 stars•00 issues•00 pull requests•Updated Apr 18, 2021Apr 18, 2021

• SourceCodeDetector

  Public
  Highly maintained improved version of source code detection algorithm. Including NNET improvements, large datasets training, support for python3 and more.

  machine-learningdeep-learningcybersecurity+ 1

  machine-learningdeep-learningcybersecuritysource-code

  Python

  •

  MIT License

  •126126 forks•44 stars•00 issues•00 pull requests•Updated Dec 14, 2020Dec 14, 2020

• SourceCodeTraining

  Public
  Tool to build a training dataset for Guesslang, the programming language guesser

  Python

  •

  MIT License

  •99 forks•00 stars•00 issues•00 pull requests•Updated Sep 4, 2020Sep 4, 2020

• PurpleSharpEnhanced

  Public
  PurpleSharpEnhanced is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows en…

  dfirattack-defensemalware-detection+ 4

  dfirattack-defensemalware-detectionredteampurpleteamadversary-simulationattack-simulation

  C#

  •

  BSD 3-Clause "New" or "Revised" License

  •115115 forks•22 stars•00 issues•00 pull requests•Updated Sep 1, 2020Sep 1, 2020

• js-malicious-dataset

  Public
  This repository contains a list of pseudo-sorted malicious JavaScripts collected from time to time.

  HTML

  •4444 forks•00 stars•00 issues•00 pull requests•Updated May 11, 2020May 11, 2020

• Cortex-Analyzers-Modified

  Public
  Cortex-Analyzers Modified - SecTeam/CERT/SOC Security orchestration tools on steroids

  iocincident-responseforensics+ 16

  iocincident-responseforensicsdfirsecopsdigital-forensicssecurity-orchestrationsecurity-automationsecurity-toolssoar+ 9

  Python

  •

  GNU Affero General Public License v3.0

  •395395 forks•66 stars•00 issues•00 pull requests•Updated May 3, 2020May 3, 2020

• elasticsearch-py

  Public
  Official Python low-level client for Elasticsearch.

  Python

  •

  Apache License 2.0

  •1.2k1.2k forks•00 stars•00 issues•00 pull requests•Updated Apr 10, 2020Apr 10, 2020

• sast-scanner-modified

  Public
  SAST Scanner Modified - Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure …

  static-code-analysisstatic-analysisapplication-security+ 7

  static-code-analysisstatic-analysisapplication-securitysecure-codingsastsecure-coding-practicesstatic-code-and-dynamic-analysiscode-securitysecure-code-frameworksast-framework

  Python

  •

  MIT License

  •2222 forks•33 stars•00 issues•00 pull requests•Updated Mar 23, 2020Mar 23, 2020

• MalwareSamples

  Public
  Malware samples lists for educational purposes only

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Jan 28, 2020Jan 28, 2020

• o365-attack-toolkit

  Public
  A toolkit to attack Office365

  Go

  •227227 forks•11 star•00 issues•00 pull requests•Updated Sep 24, 2019Sep 24, 2019

• DependencyCheck

  Public
  OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

  Java

  •

  Apache License 2.0

  •1.4k1.4k forks•00 stars•00 issues•00 pull requests•Updated Jul 2, 2019Jul 2, 2019

• osquery

  Public
  SQL powered operating system instrumentation, monitoring, and analytics.

  C++

  •

  Other

  •2.6k2.6k forks•00 stars•00 issues•00 pull requests•Updated Feb 21, 2019Feb 21, 2019

• azucar

  Public
  NextSecurity Modified - Security auditing tool for Azure environments

  security-auditazurepowershell-script+ 8

  security-auditazurepowershell-scriptmicrosoft-azure-powershellsecurity-automationmicrosoft-azurecloud-securityazure-securitynextsecuritysecurity-auditing-tool+ 1

  PowerShell

  •

  GNU Affero General Public License v3.0

  •113113 forks•55 stars•00 issues•00 pull requests•Updated Jan 22, 2019Jan 22, 2019

• mig

  Public
  Distributed & real time digital forensics at the speed of the cloud

  Go

  •

  Mozilla Public License 2.0

  •232232 forks•00 stars•00 issues•00 pull requests•Updated Jan 11, 2019Jan 11, 2019

• CimSweep

  Public
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •146146 forks•11 star•00 issues•00 pull requests•Updated Sep 14, 2018Sep 14, 2018

• Mastering-Machine-Learning-for-Penetration-Testing

  Public
  Mastering Machine Learning for Penetration Testing, published by Packt

  Python

  •

  MIT License

  •205205 forks•00 stars•00 issues•00 pull requests•Updated Aug 5, 2018Aug 5, 2018

• sigma-to-stix

  Public
  Converting Sigma into STIX

  Python

  •11 fork•00 stars•00 issues•00 pull requests•Updated Jul 27, 2018Jul 27, 2018

• TheHive

  Public
  TheHive Modified: a Scalable, Open Source and Free Security Incident Response Platform

  thehivenextsecuritythehive-project+ 2

  thehivenextsecuritythehive-projectthehive-modifiedsoc-tools

  JavaScript

  •

  GNU Affero General Public License v3.0

  •685685 forks•22 stars•00 issues•00 pull requests•Updated Jul 6, 2018Jul 6, 2018

• CACTUSTORCH

  Public
  CACTUSTORCH: Payload Generation for Adversary Simulations

  Visual Basic

  •225225 forks•00 stars•00 issues•00 pull requests•Updated Jul 3, 2018Jul 3, 2018

• nsrlsearch

  Public
  Ingest and query NIST NSRL Reference Data Sets in Elasticsearch with Python tools and libraries.

  whitelistdfirdigital-forensics+ 3

  whitelistdfirdigital-forensicsnsrldfir-automationfile-reputation

  Python

  •

  Apache License 2.0

  •33 forks•11 star•00 issues•00 pull requests•Updated Jun 26, 2018Jun 26, 2018