njahrckstr Goto Github PK
Type: User
Bio: Penetration Tester | Network & Web Application Vulnerability Researcher/tester | OSCP | OSWP | GIAC GREM | R&D Engineer
Location: USA
Type: User
Bio: Penetration Tester | Network & Web Application Vulnerability Researcher/tester | OSCP | OSWP | GIAC GREM | R&D Engineer
Location: USA
Wiki to collect Red Team infrastructure hardening resources
A collection of Red Team focused tools, scripts, and notes
A collection of open source and commercial tools that aid in red team operations.
Red Team Scripts for AWS.
Red Canary Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research. Beginning with Endpoint Security (ES), it collects and enriches system events, displaying them graphically, with an expansive feature set designed to reduce noise.
Virtual Machine for Adversary Emulation and Threat Hunting
Tools and Techniques for Red Team / Penetration Testing
Red Team Guides
Various PowerShell scripts that may be useful during red team exercise
Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.
Simple script to generate commands to achieve reverse shells. This is a python port of Shell Lover by DevoOverkill9
This is the list of all rootkits found so far on github and other sites.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
A tool to abuse Exchange services
Repository of yara rules
A framework for BREACH and other compression-based crypto attacks
Tool to check AWS S3 bucket permissions
Scan for open AWS S3 buckets and dump the contents
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
Cobalt Strike SCT payload obfuscator
Create randomly insecure VMs
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Notes
Repository of sentinel alerts and hunting queries leveraging sysmon and the MITRE ATT&CK framework
Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.