m0chan

LaZagne

Credentials recovery project

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

ScoutSuite

Multi-Cloud Security Auditing Tool

cve

Gather and update all available and newest CVEs with their PoC.

GOAD

game of active directory

deepdarkCTI

Collection of Cyber Threat Intelligence sources from the deep and dark web

Snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

medusa

Binary instrumentation framework based on FRIDA

cloudproxy

Hide your scrapers IP behind the cloud. Provision proxy servers across different cloud providers to improve your scraping success.

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

Phishing.Database

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.

wsgidav

A generic and extendable WebDAV server based on WSGI

TokenTactics

Azure JWT Token Manipulation Toolset

azucar

Security auditing tool for Azure environments

UltimateWDACBypassList

A centralized resource for previously documented WDAC bypass techniques

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

XSS-Bypass-Filters

jwt-pwn

Security Testing Scripts for JWT

gocheck

Because AV evasion should be easy.

SnaffPoint

A tool for pointesters to find candies in SharePoint

phishing_kits

Exposing phishing kits seen from phishunt.io

mergen

Mergen is an open-source, native macOS application for auditing and checking the security of your MacOS.

CVE-2024-3400

CVE-2024-3400 Palo Alto OS Command Injection

macos_hardening

This is a macOS hardening to read or set security configuration.

SAP-Security-Audit

Training course materials and notes related to SAP security audit and penetration testing

PMapper

A tool for quickly evaluating IAM permissions in AWS.

SprayCannon

Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend database

SAPKiln

OWASP SAPKiln is a graphical user interface (GUI) tool designed to facilitate securing and auditing SAP systems effectively.

PingFederateSpray

Ping Federate Spray Passwords