sourcefrenchy

diagrams

:art: Diagram as Code for prototyping cloud system architectures

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

PENTESTING-BIBLE

articles

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

Privilege-Escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

memguard

Secure software enclave for storage of sensitive information in memory.

exploits

captcha

Go package captcha implements generation and verification of image and audio CAPTCHAs.

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

WADComs.github.io

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

usbrip

Tracking history of USB events on GNU/Linux

Serpico

SimplE RePort wrIting and COllaboration tool

AppSecEzine

AppSec Ezine Public Repository.

pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

Aurora-Incident-Response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

pwnbox

Docker container with tools for binary reverse engineering and exploitation.

threatspec

threatspec - continuous threat modeling, through code

nsacyber.github.io

NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate

GPUSleep

Move CS beacon to GPU memory when sleeping

oscp-notetaking

This repository houses some of the small scripts I had used to quickly document throughout my OSCP course. This was referenced on YouTube, and should be made available to others!

karn

Simplifying Seccomp enforcement in containerized or non-containerized apps

combine_harvester

Rust in-memory dumper

Conf-Thief

A Red Team tool for exfiltrating sensitive data from Confluence pages.

Messenger-Forensics

Forensic Analysis of Signal, Wickr, Threema - Decrypt all databases and multimedia files

RedTeamCheatsheet

All the common commands used in a red teaming operation or CTF. This is a work in progress and will be updated with time.

certexfil

Exfiltration based on custom X509 certificates

DC27-MULTI-PASS

DC27 MULTI PASS Badge

tomb

password manager written in rust with TUI, stores aes-256-cbc encrypted data in a yaml file