archb1sh0p

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

logoly

A Pornhub Flavour Logo Generator

ScoutSuite

Multi-Cloud Security Auditing Tool

GOAD

game of active directory

diaphora

Diaphora, the most advanced Free and Open Source program diffing tool.

DeTTECT

Detect Tactics, Techniques & Combat Threats

Awesome-Azure-Pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

swtpm

Libtpms-based TPM emulator with socket, character device, and Linux CUSE interface.

rpcfirewall

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

tram

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

mitreattack-python

A python module for working with ATT&CK

karton

Distributed malware processing framework based on Python, Redis and S3.

ATTACKdatamap

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

panther-analysis

Built-in Panther detection rules and policies

nixbox

NixOS Vagrant boxes [maintainer=@ifurther]

Shhmon

Neutering Sysmon via driver unload

MDE_Enum

comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reduction (ASR) rules without Admin privileges

TierZeroTable

Table of AD and Azure assets and whether they belong to Tier Zero

gcpwn

Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot

IndicatorOfCanary

Canary Detection

win10-vm

Windows 10/11 VM on Linux (QEMU/libvirt/KVM) with Secure Boot, BitLocker, and good performance

ad-training-lab

Automated Active Directory lab running on Proxmox

YetiHunter

Permiso Security has created a tool to query snowflake environments for evidence of compromise, based on indicators from Permiso and the community.

PowerShellBlazor

PowerShell Blazor Portal. Run PowerShell scripts via Blazor server WebApp with real-time feedback

detection-rules-explorer

UI to explore and learn about Elastic Security Detection Rules

sf-automatic-data-export-script

Automatically download Data Export files

picotouch_bizcard

business card sized USB / MIDI touch controller

nixos-in-10-minutes

Bring up a nixos instance in 10 minutes using nixos-anywhere