nkokkoon

The_Shelf

Retired TrustedSec Capabilities

awesome-cicd-attacks

Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.

CTFs

CTF Cheat Sheet + Writeups / Files for some of the Cyber CTFs that I've done

cs4035_CDA

Repo for the CS4035 - Cyber Data Analytics course @TUD

plandex

AI driven development in your terminal. Designed for large, real-world tasks.

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

ATTACK-Python-Client

Python Script to access ATT&CK content available in STIX via a public TAXII server

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

DarkGPT

DarkGPT is an OSINT assistant based on GPT-4-200K (recommended use) designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes.

Mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

system-design

A resource to help you become good at system design.

RustRedOps

🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

yarb

方便获取每日安全资讯的爬虫和推送程序

presentations

SpecterOps Presentations

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

bincapz

enumerate binary capabilities, including malicious behaviors

universal-android-debloater

Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices. Improve your privacy, the security and battery life of your device.

giskard

🐢 Open-Source Evaluation & Testing for LLMs and ML models

LLM-Finetuning-Toolkit

Toolkit for fine-tuning, ablating and unit-testing open-source LLMs.

changedetection.io

The best and simplest free open source web page change detection, website watcher, restock monitor and notification service. Restock Monitor, change detection. Designed for simplicity - Simply monitor which websites had a text change for free. Free Open source web page change detection, Website defacement monitoring, Price change notification

athi

ATHI — An AI Threat Modeling Framework for Policymakers

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

ttp0_community_templates

SuperAdapters

Finetune ALL LLMs with ALL Adapeters on ALL Platforms!

awesome-gpt-security

A curated list of awesome security tools, experimental case or other interesting things with LLM or GPT.

DevOpsGPT

Multi agent system for AI-driven software development. Combine LLM with DevOps tools to convert natural language requirements into working software. Supports any development language and extends the existing code.

pml-book

"Probabilistic Machine Learning" - a book series by Kevin Murphy

Malicious_Containers_Workshop

Workshop resources and materials for Workshop presented at DefCon and other security conferences - Creating and Uncovering Malicious Containers