Gheek

ACID

opcua-exploit-framework

Advanced OPC-UA framework for vulnerability research & exploitation

PCS7-Hardening-Tool

PowerShell script for hardening Siemens Simatic PCS 7 servers

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

chisel

A fast TCP/UDP tunnel over HTTP

protocol

An ASCII Header Generator for Network Protocols

PSRansom

PowerShell Ransomware Simulator with C2 Server

zeek_anomaly_detector

A completely automated anomaly detector Zeek network flows files (conn.log).

zat

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

gmailc2

A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions

CCgen.v2

Generate, inject and extract covert channels in TCP/IP flows

py_CCgen

Generate, inject and extract covert channels in network traffic

testu01_gateway

A gateway in docker to use TestU01 random number generator test suite via simple pipe

nts-poc-python

NTS proof of concept in Python

SNIcat

SNIcat

arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

zui

Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.

provreq

Adversary Emulation Planner

caldera

Automated Adversary Emulation Platform

covertchannels-steganography

A list of covert channels and steganography/steganalysis resources (books, papers & tools)

StratosphereLinuxIPS

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

WEASEL

DNS covert channel implant for Red Teams.

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

steg-tools

A list of tools and material on steganography and information hiding

steg-in-the-wild

A list of attacks or malware using steganography or information hiding

Modbus_dataset

Modbus Dataset from CSET 2016

subspace

A simple WireGuard VPN server GUI

wg-ui

WireGuard Web UI for self-serve client configurations, with optional auth.

polybar

A fast and easy-to-use status bar

bspwm

A tiling window manager based on binary space partitioning