Chan9390

Chan9390's Stars

• sense-of-security/ADRecon

  ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

  Language:HTML1.7k285

• Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

  Language:PowerShell2.5k500

• appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training

  Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

  Language:CSS928257

• tenable/access-undenied-aws

  Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable remediation steps. Open-sourced by Ermetic.

  Language:Python26111

• matanolabs/matano

  Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

  Language:Rust1.5k103

• AzureAD/AzureADAssessment

  Tooling for assessing an Azure AD tenant state and configuration

  Language:PowerShell761106

• Cloud-Architekt/AzureAD-Attack-Defense

  This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

  Language:PowerShell2.2k321

• 61106960/adPEAS

  Powershell tool to automate Active Directory enumeration.

  Language:PowerShell1k126

• NetSPI/gcpwn

  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot

  Language:Python21317

• ScaleSec/terraform_aws_scp

  AWS Organizations Service Control Policies (SCPs) written in HashiCorp Terraform.

  Language:HCL23444

• threatexpress/malleable-c2

  Cobalt Strike Malleable C2 Design and Reference Guide

  1.6k298

• ssh-mitm/ssh-mitm

  SSH-MITM - ssh audits made simple

  Language:Python1.3k145

• mondoohq/cnspec

  An open source, cloud-native security to protect everything from build to runtime

  Language:Go28116

• lawndoc/Respotter

  Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.

  Language:Python18410

• hausec/PowerZure

  PowerShell framework to assess Azure security

  Language:PowerShell1.1k167

• pushsecurity/saas-attacks

  Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

  1.2k84

• rootsecdev/Azure-Red-Team

  Azure Security Resources and Notes

  Language:PowerShell1.5k204

• OWASP/DevSecOpsGuideline

  The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

  Language:Python861199

• TracecatHQ/tracecat

  The open source Tines / Splunk SOAR alternative for security engineers.

  Language:TypeScript2.4k176

• rebuy-de/aws-nuke

  Nuke a whole AWS account and delete all its resources.

  Language:Go5.8k724

• stackrox/stackrox

  The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.

  Language:Go1.1k144

• easttimor/aws-incident-response

  Language:HCL36658

• mvelazc0/BadZure

  BadZure orchestrates the setup of Azure AD tenants, populating them with diverse entities while also introducing common security misconfigurations to create vulnerable tenants with multiple attack paths.

  Language:Python42925

• dafthack/MSOLSpray

  A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

  Language:PowerShell917171

• zmallen/cloudtrail2sightings

  Convert cloudtrail data to MITRE ATT&CK Sightings

  798

• primeharbor/aws-fast-fixes

  Scripts to quickly fix security and compliance issues

  Language:Python255

• FogSecurity/aws-default-encryption-tracker

  Tracker for Encryption by Default for AWS Resources

  9

• zoph-io/aws-security-survival-kit

  Bare minimum AWS Security Alerting and Configuration

  Language:Makefile46740

• awslabs/aws-security-analytics-bootstrap

  AWS Security Analytics Bootstrap enables customers to perform security investigations on AWS service logs by providing an Amazon Athena analysis environment that's quick to deploy, ready to use, and easy to maintain.

  24251

• DataDog/stratus-red-team

  :cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

  Language:Go1.9k220