thetraker Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

apiv2

Version 2 of the ThreatCrowd API

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

arachni

Web Application Security Scanner Framework

asoc-devops-tooling

This project will provide DevOps automation in the form of snippets, sample apps, and plugins in support of integrating with IBM Application Security on Cloud for automated security scans of software projects using popular tools and frameworks across the DevOps landscape.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

autopsy_addon_modules

Repo to store compiled modules or links to 3rd party add-on modules.

autorepeater

Automated HTTP Request Repeating With Burp Suite

avet

AntiVirus Evasion Tool

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-incident-response

A curated list of tools for incident response

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

beaker

Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

beginner-network-pentesting

Notes for Beginner Network Pentesting Course

beroot

Privilege Escalation Project - Windows / Linux / Mac

bloodhound

Six Degrees of Domain Admin

cardpwn

OSINT Tool to find Breached Credit Cards Information

chimay-red

POC of Mikrotik exploit from Vault 7 CIA Leaks

codewarrior

code-searching tool and static analysis - Beta, at construction

commandlinebasics

Exercise Files for Learn the Linux Command Line: The Basics at Lynda.com

commando-vm

computer-science

:mortar_board: Path to a free self-taught education in Computer Science!

crawlergo

A powerful dynamic crawler for web vulnerability scanners

credential-dumping

This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential Access) with examples. There are multiple ways to perform the same tasks

crowdsec

Crowdsec - An open-source, lightweight agent to detect and respond to bad behaviours. It also automatically benefits from our global community-wide IP reputation database.

ctfs

Walkthrough some CTFs

cve

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2018-0802

PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)

cve-2019-0708-poc

proof of concept exploit for Microsoft Windows 7 and Server 2008 RDP vulnerability