Stars
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
The personal information dashboard for your terminal
Python script to decode common encoded PowerShell scripts
Post-exploitation tool for hiding processes from monitoring applications
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Empire is a PowerShell and Python post-exploitation agent.
Virtual Machine for Adversary Emulation and Threat Hunting
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
A repository for using windows event forwarding for incident detection and response
A book about the internals of the Go programming language.
A list of command-line tools for manipulating structured text data
Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
Script to create templates to use with VirtualBox to make vm detection harder
YARA signature and IOC database for my scanners and tools
Checklist of the most important security countermeasures when designing, testing, and releasing your API
Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
APT & CyberCriminal Campaign Collection
🔒 Password Exposed Helper Function - Check if a password has been exposed in a data breach.
Exchange Transport rules to detect and enable response to phishing
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
Impacket is a collection of Python classes for working with network protocols.
CLI tool for open source and threat intelligence
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
A toolset to make a system look as if it was the victim of an APT attack