ION28

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

gatus

⛑ Automated developer-oriented status page

Reptile

LKM Linux rootkit

napalm

Network Automation and Programmability Abstraction Layer with Multivendor support

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

ROADtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

fixinventory

Fix Inventory consolidates user, resource, and configuration data from your cloud environments into a unified, graph-based asset inventory.

QCSuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

siglens

100x Efficient Log Management than Splunk :rocket: Reduce your observability cost by 90%

ExploitGSM

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

BGPalerter

BGP and RPKI monitoring tool. Pre-configured for real-time detection of visibility loss, RPKI invalid announcements, hijacks, ROA misconfiguration, and more.

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

vulnrichment

A repo to conduct vulnerability enrichment.

cnext-exploits

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

misconfig-mapper

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

dbsc

admyral

🤖 Admyral's Python SDK simplifies writing workflow automations for Security Engineers

MeshAgent

MeshAgent used along with MeshCentral to remotely manage computers. Many variations of the background management agent are included as binaries in the MeshCentral project.

Medusa

LD_PRELOAD Rootkit

SteppingStones

A Red Team Activity Hub

VirtFuzz

VirtFuzz is a Linux Kernel Fuzzer that uses VirtIO to provide inputs into the kernels subsystem. It is built with LibAFL.

vm-console-client-python

the UNOFFICIAL (but useful) Python library for the Rapid7 InsightVM/Nexpose RESTful API

pktstat

Simple ethernet interface traffic monitor and reporting tool

Sentinel-Automation

Sentinel Logic Apps/Playbooks to automate enrichment, incident analysis and more.

POFR

Penguin OS Forensic (or Flight) Recorder

PlasmaPup

PlasmaPup is designed to help central and departmental IT personnel understand their exposures in Active Directory by showing which accounts have permissions to make changes within their OU(s) or modify group policy applying to thier OU(s).

glitch

General purpose attack-defense range for zero-config deployment

fixctl

Fix CLI tool

kibana-access