zpaav

DefenderYara

Extracted Yara rules from Windows Defender mpavbase and mpasbase

CloudGrappler

PowerJoker

PowerJoker is a Dynamic PowerShell Reverse-Shell Generator; Unique Payloads with different results on Each Execution.

EDR-Preloader

An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

expressots

A Typescript + Node.js lightweight framework for quick building scalable, easy to read and maintain, server-side applications 🐎

clroxide

A rust library that allows you to host the CLR and execute dotnet binaries.

PyRIT

The Python Risk Identification Tool for generative AI (PyRIT) is an open access automation framework to empower security professionals and machine learning engineers to proactively find risks in their generative AI systems.

terracognita

Reads from existing public and private cloud providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration

pglite

Lightweight Postgres packaged as WASM into a TypeScript library for the browser, Node.js, Bun and Deno

rbac-tool

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

DFIR-Regular-Expressions

Regular Expressions List used in Digital Forensic Tasks

DarkWidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

Shelter

ROP-based sleep obfuscation to evade memory scanners

lotp

boostsecurityio/lotp

kubeconform

A FAST Kubernetes manifests validator, with support for Custom Resources!

AWSZeroTrustPolicy

Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adoption of smart access control

awesome-pentest-cheat-sheets

Collection of cheat sheets useful for pentesting

cve-rs

Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀

SOC-Interview-Questions

SOC Interview Questions

tempo

📆 Parse, format, manipulate, and internationalize dates and times in JavaScript and TypeScript.

pe_to_shellcode

Converts PE into a shellcode

ThievingFox

lolcerts

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

awesome-graphql-security

A curated list of awesome GraphQL Security frameworks, libraries, software and resources

secator

secator - the pentester's swiss knife

mindns

Minimal DNS server built in Rust with rule system and logging.

learning-malware-analysis

This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to worry about handling live malware.

learning-reverse-engineering

This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.

textual

The lean application framework for Python. Build sophisticated user interfaces with a simple Python API. Run your apps in the terminal and a web browser.

toolong

A terminal application to view, tail, merge, and search log files (plus JSONL).