michaeltestliu

ICED TEA's starred repositories

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

Language:PythonMIT19924 284 342

RustScan

🤖 The Modern Port Scanner 🤖

Language:RustGPL-3.013521 135 239

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Language:PowerShellBSD-3-Clause1738 64 122

A-Red-Teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

1711 660

Nidhogg

Nidhogg is an all-in-one simple to use rootkit.

Language:C++GPL-3.01674 32 15

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

Language:Python1457 54 29

VX-API

Collection of various malicious functionality to aid in malware development

Language:C++MIT1379 41 13

ai-exploits

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

Language:PythonNOASSERTION1357 31 3

decider

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

Language:HTMLNOASSERTION1038 28 30

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Language:C++BSD-3-Clause875 14 2

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

Language:PythonGPL-3.0860 21 12

Burp-Suite-Certified-Practitioner-Exam-Study

Burp Suite Certified Practitioner Exam Study

Language:Python848 17 2

ADExplorerSnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

Language:Python842 8 28

ja4

JA4+ is a suite of network fingerprinting standards

Language:RustNOASSERTION813 22 67

Forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

Language:C++GPL-3.0720 15 3

APKHunt

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

Language:GoGPL-3.0718 13 7

GoogleRecaptchaBypass

Solve Google reCAPTCHA in less than 5 seconds! 🚀

Language:Python713 10 4

ohshint.gitbook.io

So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools. Suggestions for new OSINT resources is always welcomed.

Language:HTMLNOASSERTION695 21 2

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Language:PythonAGPL-3.0623 10 29

Supernova

Real fucking shellcode encryptor & obfuscator tool

Language:GoMIT618 10 3

TokenTactics

Azure JWT Token Manipulation Toolset

Language:PowerShellBSD-3-Clause571 14 5

Azure-Sentinel-Notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

Language:Jupyter NotebookMIT536 35 26

C2IntelFeeds

Automatically created C2 Feeds

Language:REXXNOASSERTION480 30 17

BadUSB-Files-For-FlipperZero

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.

Language:PowerShell474 12 7

vulnrichment

A repo to conduct vulnerability enrichment.

CC0-1.0414 21 42

ImgBackdoor

Hide your payload into .jpg file

Language:ShellApache-2.0384 7 5

porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

Language:PythonGPL-3.0332 40

Stinger

CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as Administrator.

Language:C++274 70

LOLBins

The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders understand how LOLBin binaries are used by threat actors during an intrusion in a graphical and digestible format for the TIPs platform using the STIX format.

Language:HTMLGPL-3.0105 70

CobaltStrike-Config

Repository for archiving Cobalt Strike configuration

26 90