mbrancato

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

sqlmap

Automatic SQL injection and database takeover tool

setup-ipsec-vpn

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

browsh

A fully-modern text-based browser, rendering to TTY and browsers

xg2xg

by ex-googlers, for ex-googlers - a lookup table of similar tech & services

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

byob

An open-source post-exploitation framework for students, researchers and developers.

wfuzz

Web application fuzzer

aquatone

A Tool for Domain Flyovers

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

arachni

Web Application Security Scanner Framework

signal-cli

signal-cli provides an unofficial commandline, JSON-RPC and dbus interface for the Signal messenger.

go-mysql-server

A MySQL-compatible relational database with a storage agnostic query engine. Implemented in pure Go.

kubernetes-elasticsearch-cluster

Elasticsearch cluster on top of Kubernetes made easy.

AD-control-paths

Active Directory Control Paths auditing and graphing tools

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities

ircapabilities

Incident Response Hierarchy of Needs

pyew

Official repository for Pyew.

threat_intel

Threat Intelligence APIs

rupture

A framework for BREACH and other compression-based crypto attacks

CVE-2023-0179-PoC

Pass-the-Hash-Guidance

Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber

kubernetes-elk-cluster

ELK (Elasticsearch + Logstash + Kibana) cluster on top of Kubernetes made easy.

kill-kube-ns

Kill a Kubernetes namespace suffering from being stuck in "Terminating"

aws-minikube

Single node Kubernetes instance implemented using Terraform and kubeadm

DefCon24

DefCon24

The_Automotive_Threat_Modeling_Template

NCC Group Template for the Microsoft Threat Modeling Tool 2016 for Automotive Security

docker-cloudstack

Builds and runs a CloudStack Management Server stack under Docker.

vault-client

Dead simple HashiCorp Vault consumer client