zpaav

toolong

A terminal application to view, tail, merge, and search log files (plus JSONL).

sudo

It's sudo, for Windows

Cobalt-Strike-Profiles-for-EDR-Evasion

Cobalt Strike Profiles for EDR Evasion

electroniz3r

Take over macOS Electron apps' TCC permissions

AWS-RedTeam-ADLab

DemoLab

A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI

MHDDoS

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

Labyrinthos.js

A JavaScript procedural generator for Mazes, Terrains, and Biomes. Designed for game developers and professional hobbyists, Labyrinthos.js offers a very simple-to-use API for crafting complex, customizable landscapes

TeamsBreaker

PurpleLab

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules, simulate logs, and undertake various security tasks, all accessible through a user-friendly web interface

aws-customer-security-incidents

A repository of breaches of AWS customers

frameless-bitb

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

semgrep-rules

Semgrep queries developed by Trail of Bits.

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

QuickAsm

Proxy-DLL-Loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

cve-maker

Tool to find CVEs and Exploits.

GraphStrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

LeftoverLocalsRelease

The public release of LeftoverLocals code

SSH-Snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

KEV

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

SploitScan

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

gato

GitHub Actions Pipeline Enumeration and Attack Tool

cargo-unmaintained

Find unmaintained packages in Rust projects

cdk-goat

Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure

LDAP-Monitoring-Watchdog

LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications, and deletions for administrators and security researchers.

Jekyll-YAMT

YAMT is a minimal Jekyll theme focused on simplicity and ease-of-use.

Privesc

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

aws2tf

aws2tf - automates the importing of existing AWS resources into Terraform and outputs the Terraform HCL code.

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.