abzcoding

MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

KubeHound

Tool for building Kubernetes attack paths

SharpBlock

A method of bypassing EDR's active projection DLL's by preventing entry point exection

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

sliver

Adversary Emulation Framework

impacket

Impacket is a collection of Python classes for working with network protocols.

Rubeus

Trying to tame the three-headed dog.

BloodHound

Six Degrees of Domain Admin

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

openappsec

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

metasecjs

MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts

NucleiFuzzer

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

slither

Static Analyzer for Solidity and Vyper

eth-security-toolbox

A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.

hardhat-starter-kit

A repo for boilerplate code for testing, deploying, and shipping chainlink solidity code.

echidna

Ethereum smart contract fuzzer

bbot

A recursive internet scanner for hackers.

CloudRecon

Smart-Contract-Auditor-Tools-and-Techniques

This repo contains a comprehensive list of smart contract auditor tools and techniques that can be utilized by both smart contract auditors and blockchain developers for developing secure smart contracts

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF

walls

All of my wallpapers in one repo.

unshackle

Open-source tool to bypass windows and linux passwords from bootable usb

awesome-virtualization

Collection of resources about Virtualization

Audits

This repository represents my portfolio of smart contract security audits and audit contest findings

SCSTG

Smart Contract Security Testing Guide (SCSTG)