itzdan Goto Github PK

absent-loader

Example Loader to be used as a learning resource for people interested in how commercially available malware is made.

adaz

Automatically deploy customizable Active Directory labs in Azure

ail-framework

AIL framework - Analysis Information Leak framework

ail-training

AIL project training materials

amitt_framework

AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. AMITT is part of misinfosec - work on adapting information security practices to help track and counter misinformation - and is designed as far as possible to fit existing infosec practices and tools.

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

apt_report

Interesting apt report collection and some special ioc express

at-ps

Adversary Tactics - PowerShell Training

athena

GUI Tool to generate threat intelligence information in various formats

atomic-red-team-intelligence-c2

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.

atomiccaldera

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azure-sentinel-notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

azure-zentinel

batch_deobfuscator

Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.

bettersafetykatz

BetterSafetyKatz

blah

bleak

A Windows native DLL injection library that supports several methods of injection.

blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

bluegate

PoC (DoS) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE

bluegate-1

PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610

bluekeep-scanner

BlueKeep powershell scanner (based on c# code)

bof_collection

Various Cobalt Strike BOFs

bookmarks

bookmarks

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

byob

BYOB (Build Your Own Botnet)

bzar

A set of Zeek scripts to detect ATT&CK techniques.