gdraperi Goto Github PK

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-config-bypass-finder

Detect possible sysmon logging bypasses given a specific configuration

sysmonsimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

t-fuzz

tactical-exploitation

Modern tactical exploitation toolkit.

teh_s3_bucketeers

terraform-provider-cmdexec

Terraform provider for command execution

tfsec

:lock::earth_africa: Static analysis powered security scanner for your terraform code

thc-1001-tips-and-tricks

Various tips & tricks

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the_cyber_plumbers_handbook

Free copy of The Cyber Plumber's Handbook

tinynuke

zeus-style banking trojan

tiscripts

Turbo Intruder Scripts

tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

tlpt-codenames

Generator for TLPT codenames

tls-redirection

TLS Redirection

tokenvator

A tool to elevate privilege with Windows Tokens

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

traildiscover

An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

uglyexe

UglyEXe - bypass some AVs

uhoh365

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

ultimateapplockerbypasslist

The goal of this repository is to document the most common techniques to bypass AppLocker.

urlgrab

A golang utility to spider through a website searching for additional links.

vajra

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.

vba-macro-projects

This repository is a collection of my malicious VBA projects.

vba2graph

Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.

viewstate

Python library for ASP.NET view state decoding

virtuailor

IDAPython tool for creating automatic C++ virtual tables in IDA Pro