Next Security Solutions

Awesome-Cloud-Security

Awesome curate list of cyber security penetration testing tools for Cloud Security mainly AWS/Azure/Google

VSAT

Virtualization Security Audit Tool - Security assess CIS compliance of a Virtualization environments

Cortex-Analyzers-Modified

Cortex-Analyzers Modified - SecTeam/CERT/SOC Security orchestration tools on steroids

azucar

NextSecurity Modified - Security auditing tool for Azure environments

XSSBypass

XSS Bypass techniquies

maltrail

Malicious traffic detection system

sast-scanner-modified

SAST Scanner Modified - Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!

SourceCodeDetector

Highly maintained improved version of source code detection algorithm. Including NNET improvements, large datasets training, support for python3 and more.

CimSweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

MalwareSamples

Malware samples lists for educational purposes only

nsrlsearch

Ingest and query NIST NSRL Reference Data Sets in Elasticsearch with Python tools and libraries.

o365-attack-toolkit

A toolkit to attack Office365

PurpleSharpEnhanced

PurpleSharpEnhanced is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

Richkware

Framework for building Windows malware, written in C++

TheHive

TheHive Modified: a Scalable, Open Source and Free Security Incident Response Platform

.github

box-js

A tool for studying JavaScript malware.

CACTUSTORCH

CACTUSTORCH: Payload Generation for Adversary Simulations

CVE-2022-30075

Modified OT CVE vulnerability over Tp-Link Devices version Archer AX50 Authenticated RCE

CVE-2022-30190-follina-Office-MSDT-Fixed

Modified follina Vulnerability - CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

elasticsearch-py

Official Python low-level client for Elasticsearch.

js-malicious-dataset

This repository contains a list of pseudo-sorted malicious JavaScripts collected from time to time.

Mastering-Machine-Learning-for-Penetration-Testing

Mastering Machine Learning for Penetration Testing, published by Packt

mig

Distributed & real time digital forensics at the speed of the cloud

misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

sigma-to-stix

Converting Sigma into STIX

SourceCodeTraining

Tool to build a training dataset for Guesslang, the programming language guesser

yara-rules-harvester