lnxg33k

webhandler

Bash simulator to control a server using PHP system functions.

misc

Collection of useful scripts.

pwn-me

This app was made to help security people and web developers to test their development skills and get more familiar with common attack vectors that target web nowadays.

blackFeeds

List of malicious domains to be indexed in ELK.

watchme

A high level file system watcher built in top of watchdog python module for watching file changes on a specific path and give alerts based on events..

auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

CB-Threat-Hunting

DetectionLab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

Narith

Pcap analyzer

request_handler

sqlmap

Automatic SQL injection and database takeover tool

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

blacklists

bleach

Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes

brostash-pipeline

Brostash Logstash pipeline

bugtrack

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

django-check-seo

Django Check SEO will check the SEO aspects of your site for you, and will provide advice in case of problems. Compatible with Django & Django-CMS!

Drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

gowap

Wappalyzer implementation in Go

iScanner

iScanner , Professional security scanner

lnxg33k

office365-management-api-elk

An API connector for the Office 365 Management API and the Elastic Stack

python-Wappalyzer

Python driver for Wappalyzer, a web application detection utility.

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-modular

A repository of sysmon configuration modules

wpscan

WPScan is a black box WordPress vulnerability scanner.

ztag

Tagging and annotation framework for scan data