mapost

RaKKeN

Information Security Information From Web

bbot

A recursive internet scanner for hackers.

ActionPacks

Public PowerShell script gallery for ScriptRunner.

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

security-controls

incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

BackdoorsAndBreaches

Open-Source PowerShell module to allow online play of Backdoors & Breaches card game devised by Black Hills Information Security

cset

Cybersecurity Evaluation Tool

ballerina-lang

The Ballerina Programming Language

inspec_training_courses

(WIP) A set of training material and guides for using inspec

gauntlt

a ruggedization framework that embodies the principle "be mean to your code"

inspec

InSpec: Auditing and Testing Framework

offensiveinterview

Interview questions to screen offensive (red team/pentest) candidates

public_tools

BloodHound

Six Degrees of Domain Admin

sslScrape

SSLScrape | A scanning tool for scaping hostnames from SSL certificates.

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

p0wnedShell

PowerShell Runspace Post Exploitation Toolkit

metasploit-framework

Metasploit Framework

Empire

Empire is a PowerShell and Python post-exploitation agent.

dnscat2

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

veris

Vocabulary for Event Recording and Incident Sharing (VERIS)

APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

PoshC2_Old

Powershell C2 Server and Implants

MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

crits

CRITs - Collaborative Research Into Threats