cyber-response Goto Github PK

.github

Default and organization wide metadata

admin-one-vue-tailwind

Free Vue.js 3.x Tailwind 3.x admin dashboard template with dark mode. Vite builds. Pinia state. Laravel integration available

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

antitrackingtags

api

The Pi-hole API

apidiscovery

An extension for Burp's Web Vulnerability Scanner that can detect API discovery metadata and extract data useful during recon.

atomicpurpleteam

Atomic Purple Team Framework and Lifecycle

aws-automated-incident-response-and-forensics

aws-incident-response

bbot

A recursive internet scanner for hackers.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bloodhound

Six Degrees of Domain Admin

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

bruteloops

Protocol agnostic online password guessing API.

canaryserver

Fake SMB and SAMR data

casperstager

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.

chromebackdoor

Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudburst

CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloudtrail-partitioner

crackmapexec

A swiss army knife for pentesting networks

creating-with-git

Creating with Git course repo

credking

Password spraying using AWS Lambda for IP rotation

credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

debian-debootstrap

:earth_africa: `debian-debootstrap` Docker image for multiple architectures

deepbluecli

dettect

Detect Tactics, Techniques & Combat Threats

dfis

Digital Forensic Investigative Scripts

dnsblast

A simple and stupid load testing tool for DNS resolvers