bluescreenofwin

bluescreenofwin's Stars

• iptables-viz/iptables-viz

  A simple and scalable iptables visualisation tool which can integrate across Kubernetes and Linux.

  Language:TypeScript178

• socfortress/CoPilot

  SOCFortress CoPilot

  Language:Python16025

• correlatedsecurity/Awesome-SOAR

  A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.

  766122

• Telmate/terraform-provider-proxmox

  Terraform provider plugin for proxmox

  Language:Go2k505

• cmu-sei/GHOSTS

  GHOSTS is a realistic user simulation framework for cyber simulation, training, and exercise

  Language:C#42863

• rewanthtammana/Damn-Vulnerable-Bank

  Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

  Language:Java626174

• certsocietegenerale/IRM

  Incident Response Methodologies 2022

  894140

• GoSecure/pyrdp

  RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

  Language:Python1.5k244

• Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

  Language:PowerShell2.4k482

• lorentzenman/sheepl

  Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments

  Language:Python39354

• SygniaLabs/BackupKeyManager

  Language:C#104

• fr34kyn01535/discord-fs

  Concept: Unlimited file storage using attachments in Discord chat rooms

  Language:TypeScript13216

• forscht/ddrive

  Discord as a filesystem.

  Language:JavaScript47490

• algolia/sup3rS3cretMes5age

  Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

  Language:Go50380

• starship/starship

  ☄🌌️ The minimal, blazing-fast, and infinitely customizable prompt for any shell!

  Language:Rust43.2k1.9k

• TalEliyahu/Threat_Model_Examples

  Collection of Threat Models

  36155

• punk-security/smbeagle

  SMBeagle - Fileshare auditing tool.

  Language:C#68680

• lgandx/PCredz

  This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

  Language:Python1.9k389

• fin3ss3g0d/evilgophish

  evilginx3 + gophish

  Language:Go1.6k297

• safebuffer/vulnerable-AD

  Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

  Language:PowerShell1.9k366

• scipag/HardeningKitty

  HardeningKitty - Checks and hardens your Windows configuration

  Language:PowerShell1.2k147

• WithSecureLabs/chainsaw

  Rapidly Search and Hunt through Windows Forensic Artefacts

  Language:Rust2.6k236

• stuhli/awesome-event-ids

  Collection of Event ID ressources useful for Digital Forensics and Incident Response

  56183

• cider-security-research/cicd-goat

  A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

  Language:Python1.9k299

• potatoqualitee/kbupdate

  🛡 KB Viewer, Saver, Installer and Uninstaller

  Language:PowerShell32548

• microsoft/SecCon-Framework

  Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. It’s not always obvious which permutations of policies are required to implement a complete scenario, and there are often unintended consequences of some security lockdowns. The SECCON Baselines divide configuration into Productivity Devices and Privileged Access Workstations. This document will focus on Productivity Devices (SECCON 5, 4, and 3). Microsoft’s current guidance on Privileged Access Workstations can be found at http://aka.ms/cyberpaw and as part of the Securing Privileged Access roadmap found at http://aka.ms/privsec.

  27745

• Flangvik/TeamFiltration

  TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

  Language:C#1k112

• nzymedefense/nzyme

  Network Defense System.

  Language:Java1.4k144

• EvotecIT/ADEssentials

  PowerShell Active Directory helper functions to manage healthy Active Directory

  Language:PowerShell40850

• last-byte/PersistenceSniper

  Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

  Language:PowerShell1.8k182