tquentin

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

AttackSurfaceMapper

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

awesome_Threat-Hunting

A curated list of the most important and useful resources about Threat Detection,Hunting and Intelligence.

AWS-EC2-Parse-Script

Node.JS script that will enumerate ec2 instances in a given AWS account. The script requires IAM privileges in to the selected account

Corsy

CORS Misconfiguration Scanner

DetectionLabELK

DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk.

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

dradis-ce

Dradis Framework: Colllaboration and reporting for IT Security teams

evil-ssdp

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

fatt

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

flightsim

A utility to generate malicious network traffic and evaluate controls

jeopardize

a low(zero) cost threat intelligence&response tool against phishing domains

king-phisher

Phishing Campaign Toolkit

officeparser

Extract embedded files and macros from office documents.

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

OneForAll

OneForAll是一款功能强大的子域收集工具

outlook

Outlook related VBA

PhishX

quack

Quack Toolkit is a set of a denial of service attack methods. Quack includes SMS attack method, HTTP attack method and many other attack methods.

Rigorous

Encrypt DB Password for MySQL, PHPMyAdmin, etc.

rita

Real Intelligence Threat Analytics

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

security-code-scan

Vulnerability Patterns Detector for C# and VB.NET

security-code-scan.github.io

SwiftnessX

A cross-platform note-taking & target-tracking app for penetration testers.

thc-tips-tricks-hacks-cheat-sheet

Various tips & tricks

torghost

TorGhost is an anonymization script. TorGhost redirects all internet traffic through SOCKS5 tor proxy. DNS requests are also redirected via tor, thus preventing DNSLeak. The scripts also disables unsafe packets exiting the system. Some packets like ping request can compromise your identity.

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

WatchAD

AD Security Intrusion Detection System

yara

The pattern matching swiss knife