jabdy86 Goto Github PK

rubeus-rundll32

Run Rubeus via Rundll32

rules

Repository of yara rules

s3sec

Check AWS S3 instances for read/write/delete access

scadapass

SCADA StrangeLove Default/Hardcoded Passwords List

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scoutsuite

Multi-Cloud Security Auditing Tool

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sec-vault-gen

Python utility to generate filesystem content for Obsidian.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security-assessment

Scripts to automate some part of Security/Vulnerability Assessment

security-wordlist

A wordlist repository with human-curated and reviewed content.

sgn

Shikata ga nai (仕方がない) encoder ported into go with several improvements

shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments

sharp-suite

Also known by Microsoft as Knifecoat :hot_pepper:

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpimpersonation

A User Impersonation tool - via Token or Shellcode injection

shell-backdoor-list

🎯 PHP / ASP - Shell Backdoor List 🎯

shellghost

A memory-based evasion technique which makes shellcode invisible from process start to end.

sigma

Generic Signature Format for SIEM Systems

sigma-detection-rules

Set of SIGMA rules (>320) mapped to MITRE Att@k tactic and techniques

sigma-rules

Sigma rules from Joe Security

sigma-rulescv-

Rules generated from our investigations.

silketw

slayer

Slayer

slient-doc-pdf-exploit-builder-fud-malware-cve

Vulnerability Disclosure Timeline Closer inspection of the Exploit PDF content reveals the malicious link as well as the URL Download and Execute of the tool used to generate the Exploit PDF from Python encrypted code content which we also implement in couple of our builders.

smap

a drop-in replacement for Nmap powered by shodan.io

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

socksoverrdp

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

sql-injection-payload-list

🎯 SQL Injection Payload List