tquentin's repositories
Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
AttackSurfaceMapper
AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
awesome_Threat-Hunting
A curated list of the most important and useful resources about Threat Detection,Hunting and Intelligence.
AWS-EC2-Parse-Script
Node.JS script that will enumerate ec2 instances in a given AWS account. The script requires IAM privileges in to the selected account
Corsy
CORS Misconfiguration Scanner
DetectionLabELK
DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk.
domainhunter
Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
dradis-ce
Dradis Framework: Colllaboration and reporting for IT Security teams
evil-ssdp
Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
flightsim
A utility to generate malicious network traffic and evaluate controls
jeopardize
a low(zero) cost threat intelligence&response tool against phishing domains
king-phisher
Phishing Campaign Toolkit
officeparser
Extract embedded files and macros from office documents.
OneForAll
OneForAll是一款功能强大的子域收集工具
quack
Quack Toolkit is a set of a denial of service attack methods. Quack includes SMS attack method, HTTP attack method and many other attack methods.
rita
Real Intelligence Threat Analytics
SCShell
Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
security-code-scan
Vulnerability Patterns Detector for C# and VB.NET
SwiftnessX
A cross-platform note-taking & target-tracking app for penetration testers.
thc-tips-tricks-hacks-cheat-sheet
Various tips & tricks
torghost
TorGhost is an anonymization script. TorGhost redirects all internet traffic through SOCKS5 tor proxy. DNS requests are also redirected via tor, thus preventing DNSLeak. The scripts also disables unsafe packets exiting the system. Some packets like ping request can compromise your identity.
w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
WatchAD
AD Security Intrusion Detection System
yara
The pattern matching swiss knife