Orange Cyberdefense

GOAD

game of active directory

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

ocd-mindmaps

Orange Cyberdefense mindmaps

awesome-industrial-protocols

Security-oriented list of resources about industrial network protocols.

KeePwn

A python tool to automate KeePass discovery and secret extraction.

fenrir-ocd

grepmarx

A source code static analysis platform for AppSec enthusiasts.

russia-ukraine_IOCs

Russia / Ukraine 2022 conflict related IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake

graphcat

Generate graphs and charts based on password cracking result

LinikatzV2

linikatz is a tool to attack AD on UNIX

versionshaker

Find the remote website version based on a git repository

haiti

:key: A CLI tool to identify the hash type of a given hash.

CVE-repository

:beetle: Repository of CVE found by OCD people

disposable-mailbox-docker

A self hosted yopmail like server running in a docker

cme-wmi

A standalone WMI protocol for CrackMapExec

bof

BOF (Boiboite Opener Framework) is a testing framework for industrial protocols implementations and devices.

ctf-party

:flags: A library to enhance and speed up script/exploit writing for CTF players

rabid

:cookie: A CLI tool and library allowing to simply decode all kind of BigIP cookies.

ctf-write-ups

:memo: Collection of our CTF write-ups

sikara

Ease and assist the compromise of an Active Directory environment.

reverse-proxy-auth

A Nginx reverse proxy that authenticates users using their personal certificates. Includes everything to create and revoke those certificates, create the CA and even TLS certificates for websites.

mass-nessus-docker

Deploy multiple instances of Nessus in docker containers easily

EDRSnowblast

This project is an EDRSandblast fork, adding some features and custom pieces of code.

log4shell_iocs

Log4Shell IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake

leHACK-2022

hashview

A web front-end for password cracking and analytics

sqltrees

Developper-proof prevention of SQL injection (java library)

sweetlemonade

SWEETLEMONADE is a bootkit for UEFI firmware

CyberSOC-detect-Nanocore-RAT

Détection de malwares par Artefacts : le cas du RAT Nanocore

epss_evaluations

A simple tool to evaluate CVE data sets in terms of EPSS