zxz3650

EventLogCrasher

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

SigFinder

Identify binaries with Authenticode digital signatures signed to an internal CA/domain

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

args4j

args4j

Awesome-CloudSec-Labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

blint

BLint is a Binary Linter to check the security properties, and capabilities in your executables. Since v2, blint is also an SBOM generator for binaries.

DeepBlueCLI

devstack

System for quickly installing an OpenStack cloud from upstream git for testing and development. Mirror of code maintained at opendev.org.

Digital-Forensics-Guide

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

flare-ida

IDA Pro utilities from FLARE team

fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Windows, Chromebooks, AWS, Google Cloud, Azure, data center, containers, IoT)

malware_bazzar_collector

MemProcFS

MemProcFS

metasploit-framework

Metasploit Framework

monkey

Infection Monkey - An open-source adversary emulation platform

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

opencti

Open Cyber Threat Intelligence Platform

payload-test

test

Purpleteam

Purpleteam scripts simulation & Detection - trigger events for SOC detections

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

RedCsharp

Collection of C# projects. Useful for pentesting and redteaming.

sigma

Main Sigma Rule Repository

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

Splunk4DFIR

harness the power of Splunk for your investigations

tcpreplay

Pcap editing and replay tools for *NIX and Windows - Users please download source from

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Threat-Actors-use-of-Artifical-Intelligence

WinLog_Clear

zxz3650.github.io

Build a Jekyll blog in minutes, without touching the command line.