manintheboxz

manintheboxz's Stars

• mitre/atomic

  A MITRE Caldera plugin

  Language:Python3810

• center-for-threat-informed-defense/caldera_pathfinder

  Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.

  Language:Python12326

• msdirtbag/MicrosoftPurpleTeamToolkit

  418

• cisagov/decider

  A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

  Language:HTML1.1k123

• arttoolkit/arttoolkit.github.io

  A RedTeam Toolkit

  Language:HTML38550

• redhuntlabs/Awesome-Asset-Discovery

  List of Awesome Asset Discovery Resources

  2k328

• blackhillsinfosec/play.backdoorsandbreaches.com

  Dashboard for conducting Backdoors and Breaches sessions over Zoom.

  Language:JavaScript5521

• PlumHound/PlumHound

  Bloodhound Reporting for Blue and Purple Teams

  Language:Python1.1k112

• ForceFledgling/proxyhub

  An advanced [Finder | Checker | Server] tool for proxy servers, supporting both HTTP(S) and SOCKS protocols. 🎭

  Language:Python19615

• RedSiege/GraphStrike

  Cobalt Strike HTTPS beaconing over Microsoft Graph API

  Language:C55385

• lkarlslund/Adalanche

  Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

  Language:Go1.7k161

• iknowjason/AutomatedEmulation

  An automated Breach and Attack Simulation lab with terraform. Built for IaC stability, consistency, and speed.

  Language:HCL17137

• ine-labs/ThreatSeeker

  ThreatSeeker: Threat Hunting via Windows Event Logs

  Language:Python11513

• hausec/ADAPE-Script

  Active Directory Assessment and Privilege Escalation Script

  Language:PowerShell1.1k206

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP59k24k

• undergroundwires/privacy.sexy

  Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

  Language:TypeScript4.2k174

• Greenwolf/ntlm_theft

  A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

  Language:Python1k124

• rowham/WinSigmaRuleAnalyzer

  Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of the windows rules landscape.

  Language:Python91

• YARAHQ/yara-forge

  Automated YARA Rule Standardization and Quality Assurance Tool

  Language:Python16816

• mattnotmax/cyberchef-recipes

  A list of cyber-chef recipes and curated links

  2k258

• cammurray/orca

  The Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA)

  Language:PowerShell30952

• vm32/Digital-Forensics-Script-for-Linux

  Advanced Bash script designed for conducting digital forensics on Linux systems

  Language:Shell13325

• tsale/EDR-Telemetry

  This project aims to compare and evaluate the telemetry of various EDR products.

  Language:Python1.7k159

• microsoft/ML-For-Beginners

  12 weeks, 26 lessons, 52 quizzes, classic Machine Learning for all

  Language:HTML70k14.6k

• mandiant/capa

  The FLARE team's open-source tool to identify capabilities in executable files.

  Language:Python4.9k565

• ph4nt0mbyt3/Darkside

  C# AV/EDR Killer using less-known driver (BYOVD)

  Language:C#15730

• Leo4j/Amnesiac

  Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

  Language:PowerShell34655

• CasperGN/ActiveDirectoryEnumeration

  Enumerate AD through LDAP with a collection of helpfull scripts being bundled

  Language:Python14040

• daverstephens/The-SOC-Shop

  Repository of scripts/tools that may be useful in Security Operations Centres (SOC)

  Language:Shell5433

• maysarax/SOC

  219