t2nkg1rl

chat-langchain

DeTTECT

Detect Tactics, Techniques & Combat Threats

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

Malware-Sandboxes-Malware-Source

Malware Sandboxes & Malware Source

falconpy

The CrowdStrike Falcon SDK for Python

MalAPIReader

Reads and prints information from the website MalAPI.io

Chromagnon

Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache

CAPEv2

Malware Configuration And Payload Extraction

awesome-yara

A curated list of awesome YARA rules, tools, and people.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

blocklist-ipsets

ipsets dynamically updated with firehol's update-ipsets.sh script

SCRIPTS

opencti

Open Cyber Threat Intelligence Platform

TorBot

Dark Web OSINT Tool

ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

MalAPIReader

Reads and prints information from the website MalAPI.io

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Stardust

A modern 64-bit position independent implant template

BucketLoot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

pypykatz

Mimikatz implementation in pure Python

PrivExchange

Exchange your privileges for Domain Admin privs by abusing Exchange

mitm6

pwning IPv4 via IPv6

kudu

Kudu is the engine behind git/hg deployments, WebJobs, and various other features in Azure Web Sites. It can also run outside of Azure.

stealth

:rocket: Stealth - Secure, Peer-to-Peer, Private and Automateable Web Browser/Scraper/Proxy

GraphStrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Azure_Sentinel

Bulk turn on Analytic rules in Azure Sentinel

lupo

Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation

PyMISP

Python library using the MISP Rest API