patrick-kelley Goto Github PK

aws-incident-response-playbooks

breakingpoint-api-control

bro-http2

Plugin for Zeek/Bro which provides http2 decoder/analyzer

brownian

A web interface for interacting with your Bro IDS logs.

callstranger-detector

Zeek Plugin that detects CallStranger (CVE-2020-12695) attempts (http://callstranger.com/)

common_creds

When pentesting, I find the need to brute sessions when scraping data is not possible. In this repo is a collection of common accounts I've seen or collected from other lists.

dshell

Dshell is a network forensic analysis framework.

elk-dashboards

elk-stack

gitrob

Reconnaissance tool for GitHub organizations

homebrew

The missing package manager for OS X.

incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

pemcrack

Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks. This code is extraordinarily slow, DON'T JUDGE ME!!!

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pystemon

Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon http://github.com/xme/pastemon

python_network_scripts

Simple python scripts for socket testing and network packet inspection.

reaver-wps

Automatically exported from code.google.com/p/reaver-wps

shadowhammer

Files related to our research on ShadowHammer

veil

Veil is the superproject containing all tools in the Veil-Framework

virtualenv

Virtual Python Environment builder

zeek-http-rce

A Zeek package to detect potential remote code execution attempts over HTTP.

zeek-plugin-protobuf-sqli

A Zeek plug in which decodes Protocol Buffer (protobuf), also the plug in has an option to check SQL injection (SQLi).

zeek-plugin-tds

Zeek network security monitor plugin that enables parsing of the Tabular Data Stream (TDS) protocol

zeek-script

Some Zeek's scripts, for the thesis activity of my Bachelor degree. The main purpose is to identify communication signals (Beacons) to C2.

zeek-sniffpass

Sniffpass will alert on cleartext passwords discovered in HTTP POST requests