daveyshmave Goto Github PK

ad_sec_tools

amass

In-depth Attack Surface Mapping and Asset Discovery

asvs

Application Security Verification Standard

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

auto_wordlists

autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

autopsy_addon_modules

Repo to store compiled modules or links to 3rd party add-on modules.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-bash

A curated list of delightful Bash scripts and resources.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-code-review

An "Awesome" list of code review resources - articles, papers, tools, etc

awesome-hacking-resources

A collection of hacking / penetration testing resources to make you better!

awesome-osint

:scream: A curated list of amazingly awesome OSINT

aws-config-resource-watcher

Watches for new AWS Config supported resources, updates the README with the latest list.

aws-iam-privilege-escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

aws-recon

Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.

aws-s3-dlp

Simple DLP monitor for AWS S3 is a tool built on top of CloudWatch events and Lambda functions to alert you when data is transferred to S3 buckets outside of your organization.

aws_powertools

AWS Powershell scripts to make management of AWS accounts easier

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bashbunny-payloads

The Official Bash Bunny Payload Repository

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

bloodhound

Six Degrees of Domain Admin

breach-parse

A tool for parsing breached passwords

caldera

Automated Adversary Emulation Platform

cap

The Common Alerting Protocol (CAP) allows emergency messages to be simultaneously disseminated over a wide variety of existing and emerging public alerting systems.

caplets

caplets and proxy modules.

cewl

CeWL is a Custom Word List Generator

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cimsweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.