t2nkg1rl

dnsdumpster

A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

pySigma

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

k8sgpt

Giving Kubernetes Superpowers to everyone

gobuster

Directory/File, DNS and VHost busting tool written in Go

ffuf

Fast web fuzzer written in Go

PurpleCloud

A little tool to play with Azure Identity - Azure Active Directory lab creation tool

trufflehog

Find and verify secrets

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

MicroBurst

A collection of scripts for assessing Microsoft Azure security

ComfyUI

The most powerful and modular stable diffusion GUI, api and backend with a graph/nodes interface.

Cookie-and-Handle-Stealer

C or BOF file to extract WebKit master key to decrypt user cookie

AZSentinel

PowerShell module for Azure Sentinel

atc-react

A knowledge base of actionable Incident Response techniques

azure-powershell

Microsoft Azure PowerShell

DrEureka

Official Repository for "DrEureka: Language Model Guided Sim-To-Real Transfer" (RSS 2024)

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

SliverC2-Forensics

A collection of tools and detections for the Sliver C2 Frameworj

chat-langchain

DeTTECT

Detect Tactics, Techniques & Combat Threats

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

Malware-Sandboxes-Malware-Source

Malware Sandboxes & Malware Source

falconpy

The CrowdStrike Falcon SDK for Python

MalAPIReader

Reads and prints information from the website MalAPI.io

Chromagnon

Chrome/Chromium Forensic Tool : Parses History, Visited Links, Downloaded Files and Cache