houey

misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

SonarSearch

A MongoDB importer and API for Project Sonars DNS datasets

regula

Regula checks Terraform for AWS, Azure and GCP security and CIS compliance using Open Policy Agent/Rego

screenity

The most powerful screen recorder & annotation tool for Chrome 🎥

openedr

Open EDR public repository

consoleme

ConsoleMe consolidates the management of multiple AWS accounts into a single interface. It allows your end-users and administrators to get credentials for your different accounts, and allows your users/administrators to manage or request cloud permissions.

certonid

Certonid is a Serverless SSH Certificate Authority

Amass

In-depth DNS Enumeration and Network Mapping

cloud-sniper

Cloud Security Operations Orchestrator

steampipe

Steampipe command line interface (CLI)

PMapper

A tool for quickly evaluating IAM permissions in AWS.

gfyp

Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.

DNSStager

Hide your payload in DNS

iamzero

Identity & Access Management simplified and secure.

one-time-use-presigned-url

An example of how one might leverage CloudFront to create one-time use presigned urls

certgraph

An open source intelligence tool to crawl the graph of certificate Alternate Names

Diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

scour

takingthedataz

CheeseTools

Self-developed tools for Lateral Movement/Code Execution

subjack

Subdomain Takeover tool written in Go

dwatch

fork and stripped down versioon of a now defunct DomainWatch script from ebelties

policy-templates

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

gron

Make JSON greppable!

Awesome_Firebase_DomainFront

Firebase Domain Front Code

cinema-hall

procrustes

A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked.

IAMFinder

IAMFinder enumerates and finds users and IAM roles in a target AWS account.

halogen

Automatically create YARA rules from malicious documents.