sirwomble

EQGRP_Lost_in_Translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

notesnook

A fully open source & end-to-end encrypted note taking alternative to Evernote.

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

gorilla

tool for generating wordlists or extending an existing one using mutations.

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

Awesome-RCE-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)

CVE-2021-26084_Confluence

Confluence Server Webwork OGNL injection

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

iris-web

Collaborative Incident Response platform

mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕

PowerShell

NetSPI PowerShell Scripts

PESecurity

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.

SQLInjectionWiki

A wiki focusing on aggregating and documenting various SQL injection methods

logging-essentials

A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.

gdb-pt-dump

turbo-attack

A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

WFH

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

BITB

Browser In The Browser (BITB) Templates

aws-automated-incident-response-and-forensics

SysmonSimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

ThreatHunting

This repo is where I store my Threat Hunting ideas/content

OneListForAll

Rockyou for web fuzzing

snapper-gui

GUI for snapper, a tool for Linux filesystem snapshot management, works with btrfs, ext4 and thin-provisioned LVM volumes