Neo23x0

opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

velociraptor

Digging Deeper....

Security-Datasets

Re-play Security Events

go-audit

go-audit is an alternative to the auditd daemon that ships with many distros

Manalyze

A static analyzer for PE executables.

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

car

Cyber Analytics Repository

MaliciousMacroGenerator

Malicious Macro Generator

WMImplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

Revoke-Obfuscation

PowerShell Obfuscation Detection Framework

iocs

Indicators from Unit 42 Public Reports

BeaconHunter

Detect and respond to Cobalt Strike beacons using ETW.

Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

ransomware-simulator

Ransomware simulator written in Golang

spoofing-office-macro

:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

CobaltSpam

Tool based on CobaltStrikeParser from SentinelOne which can be used to spam a CobaltStrike server with fake beacons

LiquidSnake

LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

ibombshell

Tool to deploy a post-exploitation prompt at any time

log4shell-rex

PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs

VirusTotalApi

VirusTotal Full api

patrolaroid

A production-friendly malware scanner for your AWS cloud

xioc

Extract indicators of compromise from text, including "escaped" ones.

panopticon

A YARA Rule Performance Measurement Tool

macam64

Porting macam (USB webcam driver) to macOS 10.15

PurpleSpray

PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows enterprise environments

go-revshell

Go reverse shell for Win/Linux/OSX

valentinewaifu

asgard-playbooks