Digging Deeper....

Script to remove Windows 10 bloatware.

Privacy Cards for Software Developers

Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, and a Tor bridge. It also generates custom instructions for all of these …

Get control of your servers. Simple. Effective. Awesome! https://my-netdata.io/

Set up a personal IPSEC VPN in the cloud

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.

Threat Hunting Reconnaissance Toolkit

A curated list of Awesome Threat Intelligence resources

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

Small and highly portable detection tests based on MITRE's ATT&CK.

List of Awesome Red Teaming Resources

Scan for open S3 buckets and dump

OpenSnitch is a GNU/Linux port of the Little Snitch application firewall.

Scripted Local Linux Enumeration & Privilege Escalation Checks

Hacker101

A curated list of awesome threat detection and hunting resources

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

A curated list of awesome forensic analysis tools and resources

Data flow in the Tor network

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

A python script that finds endpoints in JavaScript files

A curated list of tools for incident response

Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kud…

Slide Decks for the Majority of my Talks

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

A toolset to make a system look as if it was the victim of an APT attack

A repository for using windows event forwarding for incident detection and response

Identificador de Seguridad Web para Pentester