dr1276 Goto Github PK

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

antiope

AWS Inventory and Compliance Framework

app_splunk_sysmon_hunter

Splunk App to assist Sysmon Threat Hunting

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

autosploit

Automated Mass Exploiter

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

botsv1

brawl-public-game-001

Data from a BRAWL Automated Adversary Emulation Exercise

bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

bulk-whois

A quick way to perform a bulk whois query. Utilizes Team Cymru's service. Requires netcat.

caldera

The CALDERA automated adversary emulation system

certify

Active Directory certificate abuse.

defcon25_ps_workshop

Materials of Workshop presented at DEFCON 25

dns_detection

Detecting DNS Spoofing, DNS Tunneling, DNS Exfiltration

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

domain

Setup script for Regon-ng

domained

Multi Tool Subdomain Enumeration

flamingo

Flamingo captures credentials sprayed across the network by various IT and security products.

forgecert

"Golden" certificates

fuckconti

github-slideshow

A robot powered training repository :robot:

gitrob

Reconnaissance tool for GitHub organizations

h8mail

:mailbox_with_no_mail::mag_right: Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

hibp

A simple tool to check a bunch of email addresses against the Have I Been Pwned API.

infosec_reference

An Information Security Reference That Doesn't Suck

inspy

A LinkedIn enumeration tool

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

loki

Loki - Simple IOC and Incident Response Scanner