nolsen311

nolsen311's Stars

• fin3ss3g0d/cypherhound

  Python3 terminal application that contains 405 Neo4j cyphers for BloodHound data sets and 388 GUI cyphers

  Language:Python37429

• Dramelac/GoldenCopy

  Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.

  Language:Python8014

• NetSPI/MicroBurst

  A collection of scripts for assessing Microsoft Azure security

  Language:PowerShell2.1k314

• alexverboon/MDATP

  MDATP

  Language:PowerShell45559

• koush/scrypted

  Scrypted is a high performance video integration and automation platform

  Language:TypeScript4.3k255

• ahembree/ansible-hms-docker

  Ansible playbook for automated home media server setup

  Language:Jinja41252

• tenacityteam/tenacity-legacy

  THIS REPO IS NOT MAINTAINED ANYMORE. Please see https://codeberg.org/tenacityteam/tenacity for Tenacity, which is maintained.

  Language:C++6.7k255

• CCob/BeaconEye

  Hunts out CobaltStrike beacons and logs operator command output

  Language:C#888106

• myspaghetti/macos-virtualbox

  Push-button installer of macOS Catalina, Mojave, and High Sierra guests in Virtualbox on x86 CPUs for Windows, Linux, and macOS

  Language:Shell13.5k1.1k

• techservicesillinois/SecOps-Powershell-Qualys

  This Powershell module acts as a wrapper for the Qualys REST API, allowing you to create scripts that run system administration commands against your Qualys account

  Language:PowerShell175

• Te-k/harpoon

  CLI tool for open source and threat intelligence

  Language:Python1.2k182

• foxlet/macOS-Simple-KVM

  Tools to set up a quick macOS VM in QEMU, accelerated by KVM.

  Language:Shell13.7k1.1k

• mitre-attack/bzar

  A set of Zeek scripts to detect ATT&CK techniques.

  Language:Zeek56875

• IQTLabs/packet_cafe

  A platform built for easy-to-use automated network traffic analysis

  Language:Jupyter Notebook589

• ashemery/CuckooVM

  Cuckoo running in a nested hypervisor

  12821

• redcanaryco/invoke-atomicredteam

  Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

  Language:PowerShell849200

• jokezone/Update-Sysmon

  This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.

  Language:PowerShell8212

• redcanaryco/chain-reactor

  Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

  Language:C29433

• SpecterOps/at-ps

  Adversary Tactics - PowerShell Training

  Language:PowerShell1.5k329

• adamdriscoll/snek

  PowerShell wrapper around Python for .NET to invoke Python from PowerShell

  Language:PowerShell13713

• seajaysec/cypheroth

  Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.

  Language:Shell25142

• GTFOBins/GTFOBins.github.io

  GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

  Language:HTML10.9k1.3k

• 0xskies/CypherDog

  PoSh BloodHound Dog Whisperer

  Language:PowerShell1

• google/stenographer

  Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com

  Language:Go1.8k238

• microsoft/terminal

  The new Windows Terminal and the original Windows console host, all in the same place!

  Language:C++95.9k8.3k

• mandiant/commando-vm

  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

  Language:PowerShell7k1.3k

• Cyb3rWard0g/HELK

  The Hunting ELK

  Language:Jupyter Notebook3.8k684

• ionescu007/Simpleator

  Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".

  Language:C++33552

• russelltomkins/Active-Directory

  Collection of scripts for Querying and Managing Active Directory and Domain Controllers

  Language:PowerShell20595

• samratashok/ADModule

  Microsoft signed ActiveDirectory PowerShell module

  Language:PowerShell848198