rcegan

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

loguru

Python logging made (stupidly) simple

homepage

A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.

changedetection.io

The best and simplest free open source web page change detection, website watcher, restock monitor and notification service. Restock Monitor, change detection. Designed for simplicity - Simply monitor which websites had a text change for free. Free Open source web page change detection, Website defacement monitoring, Price change notification

flipperzero-firmware-wPlugins

RogueMaster Flipper Zero Firmware

obsidian-modular-css-layout

CSS Layout hack for Obsidian.md

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

ADCollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

sccmhunter

chat-analytics

Generate interactive, beautiful and insightful chat analysis reports

srum-dump

A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.

Max

Maximizing BloodHound. Max is a good boy.

dystopia-c2

Windows Remote Administration Tool that uses Discord, Telegram and GitHub as C2s

pyattck

A Python package to interact with the Mitre ATT&CK Framework

Incident-Response-Powershell

PowerShell Digital Forensics & Incident Response Scripts.

MDE-DFIR-Resources

A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.

IntuneCD

Tool to backup, update and document configurations in Intune

RogueSliver

A suite of tools to disrupt campaigns using the Sliver C2 framework.

dfiq

DFIQ is a collection of investigative questions and the approaches for answering them

PurpleOps

An open-source self-hosted purple team management web application.

SWAT

Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.

Azure-App-Tools

Collection of tools to use with Azure Applications

Long-Live-The-Empire

A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing on the open-source Empire C2 framework.

CTI

Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on

AzDetectSuite

A collection of ARM-based detections for Azure/AzureAD based TTPs

seclab

Automated security lab provisioning

SigmAIQ

A pySigma wrapper and langchain toolkit for automatic rule creation/translation

LiveResponse

M365 MDATP Live Response sample scripts

splunk_app_for_easm

splunk_easm_worker