Pinned Repositories
Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
Active_Directory_Advanced_Threat_Hunting
This repo is about Active Directory Advanced Threat Hunting
AD_Miner
AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses
AdvancedHuntingQueries
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant so you can try them instantly
adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
aiengine
AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
APT_CyberCriminal_Campagin_Collections
APT & CyberCriminal Campaign Collection
APT_REPORT
Interesting apt report collection and some special ioc express
attack_range
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
bijaysenihang's Repositories
bijaysenihang/Active_Directory_Advanced_Threat_Hunting
This repo is about Active Directory Advanced Threat Hunting
bijaysenihang/AD_Miner
AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses
bijaysenihang/adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
bijaysenihang/Awesome-CloudSec-Labs
Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
bijaysenihang/awesome-detection-rules
This is a collection of threat detection rules / rules engines that I have come across.
bijaysenihang/awesome-edr-bypass
Awesome EDR Bypass Resources For Ethical Hacking
bijaysenihang/awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
bijaysenihang/catalyst
Catalyst is an open source SOAR and ticket system that helps to automate alert handling and incident response processes
bijaysenihang/content
DNIF SIEM Content Repository
bijaysenihang/CVE-2023-46747-Mass-RCE
CVE-2023-46747 (F5 BIG-IP) RCE
bijaysenihang/CVE-2023-46747-POC
F5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability!
bijaysenihang/cyber_threat_intelligence
Cyber Threat Intelligence Data, Indicators, and Analysis
bijaysenihang/Damn-Vulnerable-Bank
Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.
bijaysenihang/Defender-APIs
Defender APIs - provide API scenarios to automate incident response actions in Microsoft 365 Defender and Microsoft Defender for Endpoint.
bijaysenihang/emploleaks
An OSINT tool that helps detect members of a company with leaked credentials
bijaysenihang/fake-sms
A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.
bijaysenihang/gsvsoc_cirt-playbook-battle-cards
Cyber Incident Response Team Playbook Battle Cards
bijaysenihang/hackingthe.cloud
An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
bijaysenihang/hayabusa-rules
Detection rules for Hayabusa
bijaysenihang/hookbot_source
This repository contains a few leaked files of HookBot.
bijaysenihang/KQL
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.
bijaysenihang/KQL-threat-hunting-queries
A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft 365 Defender.
bijaysenihang/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
bijaysenihang/Open-Source-Threat-Intel-Feeds
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
bijaysenihang/RedCloud-OS
RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)
bijaysenihang/RedELK
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
bijaysenihang/SOC-Multitool
A powerful and user-friendly browser extension that streamlines investigations for security professionals.
bijaysenihang/ThreatMapper
Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.
bijaysenihang/untitledgoosetool
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
bijaysenihang/waf-bypass
Check your WAF before an attacker does