hafenschiffer

amass

In-depth attack surface mapping and asset discovery

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

unredacter

Never ever ever use pixelation as a redaction technique

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Lists

Primary Block Lists

SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

CloudPentestCheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

Security-Datasets

Re-play Security Events

cset

Cybersecurity Evaluation Tool

Awesome-CobaltStrike-Defence

Defences against Cobalt Strike

security_content

Splunk Security Content

vsaq

VSAQ is an interactive questionnaire application to assess the security programs of third parties.

PurpleSharp

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

jenkins-attack-framework

sysmon-cheatsheet

All sysmon event types and their fields explained

spotifeed

A simple service to serve up Spotify podcasts as RSS feeds for use in any podcast app.

password-list

Password lists with top passwords to optimize bruteforce attacks

logging-essentials

A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.

ShodanTools

Collection of scripts & fingerprinting tricks for Shodan.io

pd-actions

Continuous recon and vulnerability assessment using Github Actions.

blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

CONVEX

CONVEX is a group of CTFs that are independently deployable into participant Azure environments.

KilledProcessCanary

A canary designed to minimize the impact from certain Ransomware actors

backdoors-and-breaches-pcio

A port of BHIS's Backdoors & Breaches for playingcards.io