Pinned Repositories
arkime
Arkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.
asmjit
Complete x86/x64 JIT and Remote Assembler for C++
Awesome-Fuzzing
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
awesome-hacking-1
A curated list of awesome Hacking tutorials, tools and resources
Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
awesome-honeypots
an awesome list of honeypot resources
awesome-industrial-control-system-security
A curated list of resources related to Industrial Control System (ICS) security.
Bringing-Old-Photos-Back-to-Life
Bringing Old Photo Back to Life (CVPR 2020 oral)
nse-log4shell
Nmap NSE scripts to check against log4shell or LogJam vulnerabilities (CVE-2021-44228)
secguydm's Repositories
secguydm/nse-log4shell
Nmap NSE scripts to check against log4shell or LogJam vulnerabilities (CVE-2021-44228)
secguydm/arkime
Arkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.
secguydm/BruteShark
Network Analysis Tool
secguydm/capa
The FLARE team's open-source tool to identify capabilities in executable files.
secguydm/CVE-2022-21882
win32k LPE
secguydm/cvelist
Pilot program for CVE submission through GitHub
secguydm/dalton
Suricata and Snort IDS rule and pcap testing system
secguydm/Edge-Enterprise
Documentation for Edge Enterprise
secguydm/grIDS
My network monitoring solution and tools that go along with it.
secguydm/home-assistant.io
:blue_book: Home Assistant User documentation
secguydm/Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
secguydm/malcom
Malcom - Malware Communications Analyzer
secguydm/malware-ioc
Indicators of Compromises (IOC) of our various investigations
secguydm/Microsoft-365-Defender-Hunting-Queries
Sample queries for Advanced hunting in Microsoft 365 Defender
secguydm/microsoft-teams-apps-company-communicator
Company Communicator app template
secguydm/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
secguydm/misp-dashboard
A dashboard for a real-time overview of threat intelligence from MISP instances
secguydm/miteru
An experimental phishing kit detection tool
secguydm/mvision-edr-activity-feed
A command line tool to consume and subscribe to DXL events from MVISION EDR
secguydm/Nebula
Cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Components.
secguydm/noPac
CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
secguydm/OpenDXL-Anomali-STAXX
An OpenDXL client that exports observables (IOCs) from Anomali STAXX
secguydm/OpenDXLJythonClient
Java client for McAfee OpenDXL using Jython
secguydm/Pcap-Analyzer
A visual offline packet analyzer written in Python
secguydm/pcap-analyzer-1
online pcap forensic
secguydm/poseidon
Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of machine learning techniques. The machine learning algorithms classify and predict the type of device.
secguydm/powerautomate-avd-starter-kit
Starter kit to help customers integrate with and leverage Azure Virtual Desktop to scale their Power Automate Desktop machine groups
secguydm/SecGuy
secguydm/SharPyShell
SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
secguydm/urlscan-py
Python wrapper for urlscan.io's API