drewadwade
I come to InfoSec from academic research in anthropological applications for medical imaging technologies. @drewadwade
drewadwade's Stars
OWASP/CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
s0md3v/XSStrike
Most advanced XSS scanner.
owasp-amass/amass
In-depth attack surface mapping and asset discovery
byt3bl33d3r/CrackMapExec
A swiss army knife for pentesting networks
OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
SwiftOnSecurity/sysmon-config
Sysmon configuration file template with default high-quality event tracing
noraj/OSCP-Exam-Report-Template-Markdown
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
0x90n/InfoSec-Black-Friday
All the deals for InfoSec related software/tools this Black Friday
JohnHammond/ctf-katana
This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.
ustayready/fireprox
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
tomnomnom/gf
A wrapper around grep, to help you grep for things
sehno/Bug-bounty
Ressources for bug bounty hunting
1N3/BlackWidow
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
eladshamir/Internal-Monologue
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
PlumHound/PlumHound
Bloodhound Reporting for Blue and Purple Teams
ZHacker13/ReverseTCPShell
PowerShell ReverseTCP Shell - Framework
BinaryDefense/artillery
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
Telefonica/HomePWN
HomePwn - Swiss Army Knife for Pentesting of IoT Devices
SwiftOnSecurity/SwiftFilter
Exchange Transport rules to detect and enable response to phishing
gajos112/OSCP
Materials for OSCP exam
DefensiveOrigins/APT06202001
Applied Purple Teaming - (ITOCI4hr) - Infrastructure, Threat Optics, and Continuous Improvement - June 6, 2020
trustedsec/SHIPS
The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. Clients may be configured to rotate passwords automatically. Stored passwords can be retrieved by desktop support personnel as required, or updated when a password has to be manually changed in the course of system maintenance. By having unique passwords on each machine and logging of password retrievals, security can be improved my making networks more resistant to lateral movement by attackers and enhancing the ability to attribute actions to individual persons.
nccgroup/hashcrack
Guesses hash types, picks some sensible dictionaries and rules for hashcat
hmaverickadams/Pentest-Dropbox-Setup
snowytoxa/selfhash
SysCon14 release
curi0usJack/activedirectory
This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.
nccgroup/Untrue
Tool for checking passwords against TrueCrypt encrypted volumes and disks, and/or decrypting the data.
nccgroup/binja_sensei
A plugin that provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other plugins, and provides examples that showcase the features of these plugins
BishopFox/xsshunter
The XSS Hunter service - a portable version of XSSHunter.com
nccgroup/44Con2013Game
The NCC Group Game from 44CON 2013