mattreduce

postal

📮 A fully featured open source mail delivery platform for incoming & outgoing e-mail

Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

ProcMon-for-Linux

Procmon is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows. Procmon provides a convenient and efficient way for Linux developers to trace the syscall activity on the system.

flipper

:dolphin: Beautiful, performant feature flags for Ruby.

gharchive.org

GH Archive is a project to record the public GitHub timeline, archive it, and make it easily accessible for further analysis.

i2p.i2p

I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.

hermes

A document management system

Cork

A fast GUI for Homebrew written in SwiftUI

noseyparker

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

offensive-ai-compilation

A curated list of useful resources that cover Offensive AI.

decider

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

PackMyPayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

enola

This is Sherlock's sister, Modern shiny CLI tool written with Golang to help you: 🔎 Hunt down social media accounts by username across social networks

GoPurple

Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

obsidian-osint-templates

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should allow you to make some connections (see what I did there?) between how you record your data during an investigation and some of what the tool can offer FOR FREE!

awesome-kubernetes-threat-detection

A curated list of resources about detecting threats and defending Kubernetes systems.

awesome-detection-rules

This is a collection of threat detection rules / rules engines that I have come across.

reveng_rtkit

Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

Awesome-BEC

Repository of attack and defensive information for Business Email Compromise investigations

derohe

DERO Homomorphic Encryption Blockchain Protocol

srss

📘 A command line RSS/ATOM/JSON feed reader

russkiwlst

Bundle of common passwords targeting RUSSIAN-speaking audience (parsed from big data leaks)

ios-drive

KubeDagger

Kubernetes offensive framework built in eBPF

library

Collection of original report and metadata files that are used by ORKL

MacDockTileSample

Shows how to write a NSDockTilePlugin, so your DockTile can update while the app isn't running

cti-stix-diamond-activity-attack-graph

STIX 2.1 Visualizer, Attack and Activity Thread Graph for Threat Modeling

WeaponizeCrystal

Experiments in weaponizing Crystal for offensive operations.

slack-slurp

Pentesting post exploitation tool for slack

data-candiru-victims

This database tracks details about victims of Candiru's spyware, based on reporting by Citizen Lab, Microsoft, Avast, and others.