twi252 Goto Github PK

androidkernelexploitationplayground

awesome-appsec

A curated list of resources for learning about application security

awesome-incident-response

A curated list of tools for incident response

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-public-datasets

An awesome list of high-quality open datasets in public domains (on-going).

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bloodhound

Six Degrees of Domain Admin

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

dbdat

Db Database Assessment Tool

diaphora

Diaphora, a program diffing plugin for, at the moment, IDA Pro

evtx-attack-samples

Windows Events Samples

exploit-database

The official Exploit Database repository

fssh

A fake SSH server.

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

mario_baslr

PoC for breaking hypervisor ASLR using branch target buffer collisions

openvulnapi

Documentation and References for Cisco PSIRT openVuln API

payloads

Git All the Payloads! A collection of web attack payloads.

pics

Posters, drawings...

pseudotv_live

PseudoTV Live acts similar to normal broadcast or cable TV, complete with multiple preset and user-defined channels and an EPG. PseudoTV Live can directly integrate with various Kodi plugins and video sources such as Playon, Hdhomerun and PVR backends.

reverse-engineering-reference-manual

Here is a collage of reverse engineering topics that I find interesting

splunk_shells

Weaponizing Splunk with reverse and bind shells.

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-dfir

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sysmon logs.

u2freviews

Reviews of U2F devices

vfeed

vFeed - The Correlated Vulnerability And Threat Database

xssya

XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)

zaproxy

The OWASP ZAP core project