elprofesor123 Goto Github PK

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

auditd

Best Practice Auditd Configuration

awesome-appsec

A curated list of resources for learning about application security

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

aws-compliancemachinedontstop

Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Account Security Posture.

aws-forensic-tools

Tools for AWS forensics

aws-incident-response

aws-incident-response-runbooks

aws-security-assessment-solution

An AWS tool to help you create a point in time assessment of your AWS account using Prowler and Scout as well as optional AWS developed ransomware checks.

aws-security-toolbox

AWS Security Tools (AST) in a simple Docker container. :package:

aws-workshop-for-kubernetes

AWS Workshop for Kubernetes

aws_research

Public tables and other research that can accept PRs. Please visit the web link.

azucar

Security auditing tool for Azure environments

cloudformation-guard

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules.

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

cobaltstr4.4

Cobalt Strike is a commercial, full-featured, remote access tool that bills itself as "adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors". Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system.

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

cred_scanner

A simple file-based scanner to look for potential AWS access and secret keys in files

crto

Certified Red Team Operator

cset

Cybersecurity Evaluation Tool

css-keylogging

Chrome extension and Express server that exploits keylogging abilities of CSS.

cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2021-1676

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-21551

Exploit to SYSTEM for CVE-2021-21551

cvechecker

Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.