secdev02 Goto Github PK

frameless-bitb

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

gcp-goat

GCP GOAT is the vulnerable application for learn the GCP Security

generative-ai-for-beginners

18 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/

ghidra

Ghidra is a software reverse engineering (SRE) framework

ghidra-xbe

Xbox Executable Format (XBE) Loader Extension for Ghidra SRE framework

ghidrathon

The FLARE team's open-source extension to add Python 3 scripting to Ghidra.

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

goad

game of active directory

graphrunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

gungnir

CT Log Scanner

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

harden-windows-security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md

havoc

The Havoc Framework.

headerpwn

A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

hide-cobaltstrike

Hide your CobaltStrike PRO

honeycred

Utility to inject honey tokens into lsass.

honeydet

Signature based honeypot detector tool written in Golang

honeylambda

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

honeypot-webdav

WebDAV Honeypot

i-s00n

imdspoof

IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

injectmoduleinitializer

Console program and nuget package to inject a module initializer method into a built .NET assembly

inline-execute-pe

Execute unmanaged Windows executables in CobaltStrike Beacons

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

internalallthethings

Active Directory and Internal Pentest Cheatsheets

intoli-article-materials

All of the supporting materials for articles from Intoli's blog.

inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

invoke-dhcpcheckup

jackal

SSL certificate cloner