totoroha Goto Github PK

esp-rfid-thief

The ESP-RFID-Thief is a port of the Tastic RFID Thief to the ESP12S chip with the addition of a web interface and various new features. Repository includes files for both the hardware and software.

evading-autoruns

Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)

event-forwarding-guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

evtx-attack-samples

Windows Events Samples

exploit

Exploits and advisories

exploitdev

exploits

Some of my exploits.

fuxploider

File upload vulnerability scanner and exploitation tool.

gcp-firewall-enforcer

A toolbox to enforce firewall rules across multiple GCP projects.

gitgraber

gitGraber is a tool developed in Python3 to monitor GitHub to search and find sensitive data for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

gitoops

all paths lead to clouds

go-for-oscp

gplinkreport

greatsct

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

hackdeli

A scripted library of hacking techniques.

hardened-windows-server

Hardened Windows Server image

hayat

Google Cloud Platform ~ Auditing & Hardening Script

hiddenpowershelldll

iamlive

Generate an IAM policy from AWS calls using client-side monitoring (CSM) or embedded proxy

infosec_reference

An Information Security Reference That Doesn't Suck

intel_bot

Create a Slack chatbot to retrieve Threat Intelligence data.

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

internal-pentest-playbook

Internal Network Penetration Test Playbook

invoke-wmilm

itpol

Useful IT policies

lime

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

localroot

Collection of tools for privesc on Linux

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

logviewer

LogViewer for viewing and searching large text files...

lxd_root

Linux privilege escalation via LXD