mrjak3

dumpzilla

Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Cloudbox

Ansible-based solution for rapidly deploying a Docker containerized cloud media server.

MoveKit

Cobalt Strike kit for Lateral Movement

Aggressor-Scripts

Aggressor scripts for Cobalt Strike

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

joystick

Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances in the results.

100DaysHackerArt

hackerwall

Hacker Wallpaper

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

Free_CyberSecurity_Professional_Development_Resources

An awesome list of FREE resources for training, conferences, speaking, labs, reading, etc that are free. Originally built during COVID-19 for cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock. Now its taken on a life of its own and will persist, COVID be damned.

OSCP-Exam-Report-Template-Markdown

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

joplin

Joplin - the privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS.

rclone

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files

DeTTECT

Detect Tactics, Techniques & Combat Threats

mitre-attack-mapping

Mapping your datasources and detections to the MITRE ATT&CK Navigator framework.

bubblewrap

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

tldw

crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

SharpChromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

snapback

HTTP(s) Screenshots for Pen Testers Who Value Their Time

SafetyKatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

Start-ADEnum

Tool that automates Active Directory enumeration

system-design-primer

Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

leetcode-site-generator

Generate your personal LeetCode website with one command!

python-cheatsheet

Comprehensive Python Cheatsheet