Stars
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
This script is intended to automate your reconnaissance process in an organized fashion
A DNS meta-query spider that enumerates DNS records, and subdomains.
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Download your Spotify playlists and songs along with album art and metadata (from YouTube if a match is found).
📙 Amazon Web Services — a practical guide
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
Perform a MitM attack and extract clear text credentials from RDP connections
A Linux Auditd rule set mapped to MITRE's Attack Framework
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
my dotfiles, heavily aimed around using VIM and ZSH in OSX
Probe a rendering engine for vulnerabilities and other features
Small and highly portable detection tests based on MITRE's ATT&CK.
Empire is a PowerShell and Python post-exploitation agent.
⛔ (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus …
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Prevents you from committing secrets and credentials into git repositories
Audit and modify an Ubuntu system to satisfy CIS (Center for Internet Security) rules
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
A collection of vulnerable ARM binaries for practicing exploit development
Find, verify, and analyze leaked credentials
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application