zombieraven Goto Github PK

apt06202001

Applied Purple Teaming - Infrastructure, Threat Optics, and Continious Improvement - June 6, 2020

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

awesome-incident-response

A curated list of tools for incident response

bloodhound

Six Degrees of Domain Admin

blue-team-cheat-sheets

Blue Team Cheat Sheats

bluespawn

An Active Defense and EDR software to empower Blue Teams

caldera

Automated Adversary Emulation

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

content

Demisto Platform ever-growing Content Repository

cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

credking

Password spraying using AWS Lambda for IP rotation

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dettect

Detect Tactics, Techniques & Combat Threats

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

fish-shell

The user-friendly command line shell.

gcat

A PoC backdoor that uses Gmail as a C&C server

google-ctf

Google CTF

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

honeybadger

A tool that detects honeypots in Ethereum smart contracts :honey_pot: (USENIX 2019).

honeybadger-1

insecurepowershell

InsecurePowerShell is PowerShell with some security features removed.

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

malwoverview

Malwoverview is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

mimikatz

A little tool to play with Windows security