gold1029

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Red-Baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

Red-Baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

shiroPoc

emergency-response-checklist

应急响应指南 / emergency response checklist

Real-timeDetectionAD_journal

spring-boot-actuator-cloud-vul

Spring Boot Actuator + Spring Cloud Vul Env

sweetie-data

This repo contains logstash of various honeypots

CobaltStrike-Toolset

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

HideShell

A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

openresty-best-practices

posh-dsc-windows-hardening

Windows OS Hardening with PowerShell DSC

iox

Tool for port forwarding & intranet proxy

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

java-object-searcher

java内存对象搜索辅助工具

Invoke-DOSfuscation

Cmd.exe Command Obfuscation Generator & Detection Test Harness

GitMonitor

One way to continuously monitor sensitive information that could be exposed on Github

Spray

A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)

DeTTECT

Detect Tactics, Techniques & Combat Threats

Impost3r

👻Impost3r -- A linux password thief

Chinese-translation-ATT-CK-framework

ATT&CK 框架图中文翻译版 原为安恒奖品，自我二次翻译，修改了一些小的翻译错误问题，自我保存即可

BetterSafetyKatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

python_code_audit

python 代码审计项目