iStatiK

Burp-Suite-Certified-Practitioner-Exam-Study

Burp Suite Certified Practitioner Exam Study

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

pwnat

The only tool/technique to punch holes through firewalls/NATs where multiple clients & server can be behind separate NATs without any 3rd party involvement. Pwnat is a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, DNS, router admin requirements, STUN/TURN/UPnP/ICE, or spoofing.

RustHound

Active Directory data collector for BloodHound written in Rust. 🦀

Zeus-Scanner

Advanced reconnaissance utility

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Sn1per

Attack Surface Management Platform

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

ADACLScanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

trufflehog

Find and verify secrets

dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

chc-gm-isms

Archive of the Information Secuity policy documentation for Greater Manchester CHC that conforms to ISO27001

I-ISMS

Industrial Information Security Management System

Sigma-Rules

A repository of my own Sigma detection rules.

EnableWindowsLogSettings

Documentation and scripts to properly enable Windows event logs.

GCTI

awesome-event-ids

Collection of Event ID ressources useful for Digital Forensics and Incident Response

detection-rules

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

phonebox_plugin

A Telephone Number Management Plugin for Netbox and more

gophish-tools

Helpful tools for interacting with a GoPhish phishing instance

CHIRP

A DFIR tool written in Python.

cset

Cybersecurity Evaluation Tool

terminal

The new Windows Terminal and the original Windows console host, all in the same place!

CSS-Exchange

Exchange Server support tools and scripts