jordanlinden Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adgenerator

Active Directory Generator files for Movement, Pivoting, and Persistence for Pentesters and Ethical Hackers.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

bloodhound

Six Degrees of Domain Admin

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

ctid-attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

ctid_adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

deepbluecli

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

elastic-protections-artifacts

Elastic Security detection content for Endpoint

evtx-attack-samples

Windows Events Attack Samples

extract-ips

Quick Python script to demonstrate parsing command-line args, reading in files, and matching on regex

flameshot

Powerful yet simple to use screenshot software :desktop_computer: :camera_flash:

freq

This is a repository for freq.py and freq_server.py

geolocate-ips

Geolocate IP addresses with MaxMind's GeoLite2-City database

get-netinfo

List current TCP/IP network connections on a host with associated process information

get-vtreport

Generate file signatures and submit to VirusTotal for detection reports

golden_infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

gophish

Open-Source Phishing Toolkit

gophish-api-client-python

A Python API Client for Gophish

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

hacktricks

Tricks/techniques learned in CTFs, real life apps, and in reading research and news

how-to-secure-anything

How to systematically secure anything: a repository about security engineering