bluescreenofwin
Windows Hacker, Cybersecurity Trainer, Giver of Talks, WRCCDC Infrastructure Lead, Security Engineer. I work on security competitions sometimes
bluescreenofwin's Stars
algolia/sup3rS3cretMes5age
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
starship/starship
☄🌌️ The minimal, blazing-fast, and infinitely customizable prompt for any shell!
TalEliyahu/Threat_Model_Examples
Collection of Threat Models
punk-security/smbeagle
SMBeagle - Fileshare auditing tool.
lgandx/PCredz
This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
fin3ss3g0d/evilgophish
evilginx3 + gophish
safebuffer/vulnerable-AD
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
scipag/HardeningKitty
HardeningKitty - Checks and hardens your Windows configuration
WithSecureLabs/chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
stuhli/awesome-event-ids
Collection of Event ID ressources useful for Digital Forensics and Incident Response
cider-security-research/cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
potatoqualitee/kbupdate
🛡 KB Viewer, Saver, Installer and Uninstaller
microsoft/SecCon-Framework
Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices (SECCON 5, 4, and 3). Microsoft’s current guidance on Privileged Access Workstations can be found at http://aka.ms/cyberpaw and as part of the Securing Privileged Access roadmap found at http://aka.ms/privsec.
Flangvik/TeamFiltration
TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts
nzymedefense/nzyme
Network Defense System.
EvotecIT/ADEssentials
PowerShell Active Directory helper functions to manage healthy Active Directory
last-byte/PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
linuxserver/Heimdall
An Application dashboard and launcher
evan-buss/openbooks
Search and Download eBooks
olafhartong/sysmon-cheatsheet
All sysmon event types and their fields explained
nsidc/vagrant-vsphere
VMware vSphere provider for Vagrant
op7ic/EDR-Testing-Script
Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
gaia-app/gaia
Gaia is a Terraform 🌍 UI for your modules, and self-service infrastructure 👨💻
samratashok/Deploy-Deception
A PowerShell module to deploy active directory decoy objects.
UnicornTranscoder/UnicornLoadBalancer
pannal/Kitana
A responsive Plex plugin web frontend
Orange-Cyberdefense/GOAD
game of active directory
thorrak/thorrak_hardware
Collection of Thorrak's PCBs
edoardottt/awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Yaxser/Backstab
A tool to kill antimalware protected processes