douwanhu Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

apfell

A collaborative, multi-platform, red teaming framework

apt-hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-datasources

This content is analysis and research of the data sources currently listed in ATT&CK.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

atyourservice

Service Enumeration C# .NET Assembly

auto-install

auto-install script of Multi-Honeypots

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

browsergather

Fileless web browser information extraction

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

caldera

An automated adversary emulation system

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

com-object-hijacking

use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

common-function

This project provide common API of DB and FTP write with Perl.

content-doc

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crossc2

generate CobaltStrike's cross-platform payload

cve-2018-7600

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

docker-cowrie

Docker file for cowrie honeypots

docker-dionaea

build dionaea's docker image