alexrydzak

TJ-OPT

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Obsidian

APT-Attack-Simulation

This repository is a compilation of all APT simulations that target many vital sectors,both private and governmental. The simulation includes written tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and many other tools that attackers might have used in actual attacks. These tools and TTPs are simulated here.

sdrtrunk

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:

13ft

My own custom 12ft.io replacement

Red-Teaming-TTPs

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

Get-ReverseShell

A solution to create obfuscated reverse shells for PowerShell.

Invoke-PSObfuscation

An in-depth approach to obfuscating the individual components of a PowerShell payload whether you're on Windows or Kali Linux.

ripgrep

ripgrep recursively searches directories for a regex pattern while respecting your gitignore

MSIdentityTools

Repository for the Microsoft Identity Tools PowerShell module which provides various tools for performing enhanced Identity administration activities.

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

hawk

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

CorsixTH

Open source clone of Theme Hospital

Sparkle

A software update framework for macOS

zed-fonts

The Zed Mono and Sans typefaces, custom built from Iosevka

IntuneDeviceQuery

This repository contains a wide array of KQL Queries ready for you to easily copy, paste, and execute within Intune.

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Microsoft-Blue-Forest

Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

steam-lancache-prefill

CLI tool to automatically prime a Lancache with Steam games

changedetection.io

The best and simplest free open source web page change detection, website watcher, restock monitor and notification service. Restock Monitor, change detection. Designed for simplicity - Simply monitor which websites had a text change for free. Free Open source web page change detection, Website defacement monitoring, Price change notification

RedTeaming_CheatSheet

Upload_Bypass

A simple tool for bypassing file upload restrictions.

Nemesis

An offensive data enrichment pipeline

Windows-Event-Logs-With-Event-IDs

A running list of Windows sources and the related event ids.

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

nuclei-burp-plugin

Nuclei plugin for BurpSuite

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

threat-composer

A simple threat modeling tool to help humans to reduce time-to-value when threat modeling