dirkwilken Goto Github PK

ad-attack-defense

Active Directory Security For Red & Blue Team

aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

anchorwatch

A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

aws-incident-response-runbooks

aws-okta

aws-vault like tool for Okta authentication

aws-security-hub-response-and-remediation

Pre-configured response & remediation playbooks for AWS Security Hub

aws_ir

Python installable command line utiltity for mitigation of host and key compromises.

aws_public_ips

Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services

babysploit

BabySploit Beginner Pentesting Toolkit/Framework Written in Python

blackeye

The most complete Phishing Tool, with 32 templates +1 customizable

bloodhound

Six Degrees of Domain Admin

blue-attack

Mapping your blue team to ATT&CK

byob

An open-source post-exploitation framework for students, researchers and developers.

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

calico

Cloud native connectivity and network policy

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

clair

Vulnerability Static Analysis for Containers

cli53

Command line tool for Amazon Route 53

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cracke-dit

cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

deathstar

Automate getting Domain Admin using Empire

diffy

Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

docker-elk

The ELK stack powered by Docker and Compose.