backcountryinfosec

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Havoc

The Havoc Framework.

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

ATAK-Maps

A collection of maps for use in ATAK

log

A minimal, colorful Go logging library 🪵

AzureAD-incident-response

Notes on responding to security breaches relating to Azure AD

Azure-AD-Incident-Response-PowerShell-Module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

Invictus-AWS

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

GOAD

game of active directory

steganography

:see_no_evil: Steganography: Hiding an image inside another

sansfor509

Public script from SANS FOR509 Enterprise Cloud Incident Response

geospatial-intelligence-library

🛰 Your geospatial intelligence tool belt for digital investigations

hunting-rules

Suricata rules for network anomaly detection

WFH

wz_mini_hacks

wz camera mods... make your camera better.

offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

openalpr

Automatic License Plate Recognition library

ultimate-go

The Ultimate Go Study Guide

gene

Signature engine for all your logs

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

Sentinel-Queries

Collection of KQL queries

Nevermore_Micro

Activated Carbon Filters. Bad smells or fumes, or complaints thereof, should not keep you from being a maker!

RdpCacheStitcher

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

Limelighter

A tool for generating fake code signing certificates or signing real ones

relic

Relic is a service and a tool for adding digital signatures to operating system packages for Linux and Windows

go-smb2

SMB2/3 client library written in Go.

goWMIExec

Really stupid re-implementation of invoke-wmiexec

garble

Obfuscate Go builds