zer0lightning Goto Github PK

account-security

I'm just sharing some of my thoughts.

active-directory-blueteam

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory...

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

all-confs

Useful commands for a lot of things, repository to store my notes.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-cloudflare-workers

😎 Awesome Cloudflare Workers

awesome-malware-analysis-reverse-engineering

awesome-payloads

awesome-phishing

Collection of resources related to phishing

awesome-tunneling

List of ngrok alternatives and other ngrok-like tunneling software and services. Focus on self-hosting.

awesome-waf

🔥 Everything about web-application firewalls (WAF).

awesomexss

Awesome XSS stuff

badbloodmini

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

blue-team-notes

You didn't think I'd go and leave the blue team out, right?

burpsuitesharpener

capa

The FLARE team's open-source tool to identify capabilities in executable files.

cs7038-malware-analysis

Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)

ctiurlscan

CTI-URLScan is a command line tool to enable analysts to search URLscan.io submissions. Pull screenshot and DOM content. As well as, automatic extraction of API items to allow for easier ingestion later on.

decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dll-messagebox

PoC dlls for Task Scheduler COM Hijacking

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

doh-cf-pages

DNS-over-HTTPS proxy on Cloudflare Pages

doh-cf-workers

DNS-over-HTTPS proxy on Cloudflare Workers

domain-blocklist

enablewindowslogsettings

Documentation and scripts to properly enable Windows event logs.

enterprisepurpleteaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study. Doctor of Science Cybersecurity at Marymount University Dissertation by Xena Olsen.

flare-vm

grub-mod-setup_var

A modified grub allowing tweaking hidden BIOS settings.