Kogium

dhcpwn

All your IPs are belong to us.

dnsleak

Test for leaking DNS queries (i.e. if you're on a VPN)

gitem

A Github organization reconnaissance tool.

route-detect

Find authentication (authn) and authorization (authz) security bugs in web application routes.

gitrecon

OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits.

gptactical

An shell script that perform recon on target

jose

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes.

leaplytics_risk_heatmap_qlik_sense

Get a sharp visual view on your risk profiles with the Risk Heatmap for QilkSense! Interested in a more flexible with even more features? Check out our PRO version @ https://www.leaplytics.de/risk-heatmap-qliksense-offering/

gantt

GPL version of Javascript Gantt Chart

Exegol

Fully featured and community-driven hacking environment

ExtractBitlockerKeys

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.

atlas

Manage your database schema as code

Picocrypt

A very small, very simple, yet very secure encryption tool.

ASVS

Application Security Verification Standard

headerpwn

A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

myrtille

A native HTML4 / HTML5 Remote Desktop Protocol and SSH client

x509-certificate-exporter

A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone

PhishingRegex

Backup of my phishing regular expression testing bench

SwiftFilter

Exchange Transport rules to detect and enable response to phishing

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-config

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

surveyor

A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.

SecureTea-Project

The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)

ansible-windows-domain-controller

ansible-role-pdc

Setup a Primary Domain Controller and Active Directory on a Windows Server with a easy to use and abstracted Ansible role.

Anti-Ransomware

Sentinel is a malware detector programmed and researched by I and tboy (Inferno team). It detects (using ML and Watchdog), alerts and promptly deletes if accepted by user, We have also made a custom malware to test the authenticity of the anti-ransomware. This code is written for the Halogen Cyber Competition.

Ransomware-NOTE

All about ransomware notes and extension files.

security_content

Splunk Security Content

brutespray

Bruteforcing from various scanner output - Automatically attempts default creds on found services.

Rapports-Techniques

Rapports techniques de VIGINUM