Kodiyilthekkadil

cdk-nag

Check CDK applications for best practices using a combination of available rule packs

information-security-relatory

Reports from various areas of information security

cloud-active-defense

Add a layer of active defense to your cloud applications.

100-Days-of-YARA-2024

digital-forensics-lab

gourlex

Gourlex is a simple tool that can be used to extract URLs and paths from web pages.

ADCSKiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

metlo

Metlo is an open-source API security platform.

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

drozer

The Leading Security Assessment Framework for Android.

FinalRecon

All In One Web Recon

KQL

Kusto Query Language

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024

mailMeta

An forensics tool to help aid in the investigation of spoofed emails based off the email headers.

GooFuzz

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

HiddenVM

HiddenVM — Use any desktop OS without leaving a trace.

Awesome-OSINT-For-Everything

OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.

webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

learning-malware-analysis

This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to worry about handling live malware.

fingerprinter

Web application designed to raise user awareness and fortify online identities against tracking techniques.

geowifi

Search WiFi geolocation data by BSSID and SSID on different public databases.

DarkGPT

DarkGPT is an OSINT assistant based on GPT-4-200K (recommended use) designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes.

Phunter

Phunter is an osint tool allowing you to find various information via a phone number 🔎📞

CloudGrappler

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook

DFIR-Regular-Expressions

Regular Expressions List used in Digital Forensic Tasks

AwsCloudtrailBreachLogs

Example log dumps from known breaches on AWS