colindix Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

apooxml

Generate YARA rules for OOXML documents.

asciinema

Terminal session recorder 📹

autoruns

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

bloodhound

Six Degrees of Domain Admin

bootcode_parser

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

chainsaw

Rapidly Search and Hunt through Windows Event Logs

cvemap

Navigate the CVE jungle with ease.

evtx-attack-samples

Windows Events Samples

git-flight-rules

Flight rules for git

invoke-bitsparser

Sharing my BITS

linuxscripts

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

operationcloudhopper

Indicators of compromise relating to our report on APT10's targeting of global MSPs

palantir-windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

pki

Scripts to bootstrap internal Certificate Authorities (CAs) using Yubikeys

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

psgumshoe

pymbr

Read the Master Boot Record using Python

pyspark-flatten-dataframe

PySpark function to flatten any complex nested dataframe structure loaded from JSON/CSV/SQL/Parquet

python-sdb

Pure Python parser for Application Compatibility Shim Databases (.sdb files)

qr-filetransfer

📡 Transfer files over WiFi between your computer and your smartphone from the terminal

riskyspn

Detect and abuse risky SPNs

vt-py

The official Python 3 client library for VirusTotal

walitean

xcyclopedia

Encyclopedia for Executables