0xCwrw
Recently graduated with a 1:1 in Cyber Security. Currently working in #BlueTeam and continuing my education via CompTIA, HTB and THM.
0xCwrw's Stars
WerWolv/ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
DebugPrivilege/InsightEngineering
Hardcore Debugging
google/grr
GRR Rapid Response: remote live forensics for incident response
invictus-ir/ALFA
ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework
evild3ad/Microsoft-Analyzer-Suite
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
0xDigimon/PenetrationTesting_Notes-
My Notes about Penetration Testing
AndrewRathbun/VanillaWindowsReference
A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!
Meckazin/ChromeKatz
Dump cookies and credentials directly from Chrome/Edge process memory
RedByte1337/GraphSpy
Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI
p0dalirius/smbclient-ng
smbclient-ng, a fast and user friendly way to interact with SMB shares.
ic3qu33n/OffensiveCon24-uefi-task-of-the-translator
OffensiveCon 2024 Repo, contains PoCs and materials for talk "UEFI and the Task of the Translator"
MBCProject/mbc-markdown
MBC content in markdown
bellingcat/telegram-phone-number-checker
Check if phone numbers are connected to Telegram accounts.
HyperDbg/HyperDbg
State-of-the-art native debugging tool
cyb3rmik3/MDE-DFIR-Resources
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.
microsoft/ics-forensics-tools
Microsoft ICSpector (ICS Forensics Tools framework) is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files.
OTRF/ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
cisagov/untitledgoosetool
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
WillOram/AzureAD-incident-response
Notes on responding to security breaches relating to Azure AD
theowni/Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.
GhostPack/Seatbelt
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
TarlogicSecurity/BlueSpy
PoC to record audio from a Bluetooth device
dlcowen/sansfor509
Public script from SANS FOR509 Enterprise Cloud Incident Response
alpine-sec/thevlad
Analysis-oriented command line tool for remote execution and triage via EDRs API
nickvourd/GetWebDAVStatus
Determine if the WebClient Service (WebDAV) is running on a remote system
BishopFox/cve-2024-21762-check
Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762
gdedrouas/Exchange-AD-Privesc
Exchange privilege escalations to Active Directory
Orange-Cyberdefense/GOAD
game of active directory
skelsec/pypykatz
Mimikatz implementation in pure Python
netero1010/GhostTask
A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.