xxxdebug

awesome-incident-response

A curated list of tools for incident response

Havoc

The Havoc Framework.

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

caldera

Automated Adversary Emulation Platform

GOAD

game of active directory

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

BloodHound.py

A Python based ingestor for BloodHound

A-Red-Teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

BloodHound

Six Degrees of Domain Admin

monkey365

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

Wazuh-Rules

Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!

Evilginx2-Phishlets

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

KQL

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

Copilot-For-Security

Microsoft Copilot for Security is a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes at machine speed and scale, while remaining compliant to responsible AI principles

gosecretsdump

Dump ntds.dit really fast

ADLabsReview

Active Directory Labs/exams Review

secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction.

domain_audit

Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

EAST

Extensible Azure Security Tool - Documentation

AITMWorker

Proof of concept: using a Cloudflare worker for AITM attacks

BloodHound-AzureAD

BloodHound with a twist of cloud

Libellux-Up-and-Running

Install open-source software from source to focus on Zero Trust Network principles, enhancing security for existing applications, and deploying tools for threat detection and prevention.

mdefordownlevelserver

AD-Security-Assessment

Perform general security checks against AD environment

awesome-endpoint-detection-and-response

Collection of tool you need to have in your Endpoint Detection and Response arsenal

OpenVAS-GVM-Install

OpenVAS Install script / GVM install script (2023 Source and Docker build scripts)

extract-hashes

Extracts hashes from a text file.

o365discover

A tool for discovering users on Office 365