Beast code in Giters

Matt Collum's starred repositories

ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

Language:PythonMIT394400

awesome-python

An opinionated list of awesome Python frameworks, libraries, software and resources.

Language:PythonNOASSERTION21437800

BeaKer

Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

Language:ShellGPL-3.028100

velociraptor

Digging Deeper....

Language:GoNOASSERTION282700

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

MIT674500

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

Language:PythonBSD-3-Clause17600

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Language:PythonGPL-3.0375400

zeek-agent

This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2

Language:C++NOASSERTION12300

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Language:PythonBSD-3-Clause233600

SysmonCommunityGuide

TrustedSec Sysinternals Sysmon Community Guide

Language:CSS111500

physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

Unlicense46900

hashcatch

Capture handshakes of nearby WiFi networks automatically

Language:ShellGPL-3.071900

things.sh

Simple read-only comand-line interface to your Things 3 database

Language:Shell66200

DumpsterFire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

Language:PythonMIT97600

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

135000

EvilOSX

An evil RAT (Remote Administration Tool) for macOS / OS X.

Language:PythonGPL-3.0222600

Invoke-Clipboard

All of Your Copy/Paste Belong to Us: Stealing the clipboard and using it for C2 communications

Language:PowerShell5200

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT5601300

StegCracker

Steganography brute-force utility to uncover hidden data inside files

Language:PythonMIT54200

capes

Cyber Analytics Platform and Examination System (CAPES) Project Page

Language:CSSApache-2.06000

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

Language:HTMLMIT458200

sysmon-config

Sysmon configuration file template with default high-quality event tracing

468200

vulnreport

Open-source pentesting management and automation platform by Salesforce Product Security

Language:HTMLBSD-3-Clause59300

ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

MIT111900

CozyNSM

a network security monitoring platform

Language:Shell300

grr-doc

Documentation for the GRR Rapid Reponse framework

Language:PythonApache-2.029900

passer

Passive service locator, a python sniffer that identifies servers, clients, names and much more

Language:PythonGPL-3.023900

PowerMeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

Language:PowerShellMIT53500

pivpn

The Simplest VPN installer, designed for Raspberry Pi

Language:ShellMIT706400

macOS-Fortress

Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)

Language:ShellMIT40800