ATAschert

uBlock

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

mattermost

Mattermost is an open source platform for secure collaboration across the entire software development lifecycle..

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

firejail

Linux namespaces and seccomp-bpf sandbox

OSCE3-Complete-Guide

OSWE, OSEP, OSED, OSEE

100-redteam-projects

Projects for security students

awesome-iam

👤 Identity and Access Management knowledge for cloud platforms

open-source-web-scanners

A list of open source web security scanners

semgrep-rules

Semgrep rules registry

mac_apt

macOS (& ios) Artifact Parsing Tool

Ransomware-Tool-Matrix

A resource containing all the tools each ransomware gangs uses

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Cheat-Sheet---Active-Directory

This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.

sectemplates

Open source templates you can use to bootstrap your security programs

aftermath

Aftermath is a free macOS IR framework

LsassSilentProcessExit

Command line interface to dump LSASS memory to disk via SilentProcessExit

Lsass-Shtinkering

ContainYourself

A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.

EDRPrison

Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry

inthewilddb

Hourly updated database of exploit and exploitation reports

OversecuredVulnerableiOSApp

Oversecured Vulnerable iOS App

hackshell

Make BASH stealthy and hacker friendly with lots of bash functions

WebAppPentestRoadmap

Roadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)

rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

ShellSweep

ShellSweeping the evil.

edr_blocker

Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination IP addresses are parsed based on the server name in TLS Client Hello packet and the provided blocked server name (or blocked string) list in the file.

ShimMe

hrtng

IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations

DinoSOARLab

Security Onion + Automation + Response Lab including n8n and Velociraptor

RetrievIR

PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.