Pinned Repositories
AM0N-Eye
awesome-aws-security
Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security
Awesome-CloudSec-Labs
Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
Awesome-GPT-Agents
A curated list of GPT agents for cybersecurity
awesome-lists
Awesome Security lists for SOC/CERT/CTI
awesome-windows-red-team
A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
aws-customer-security-incidents
A repository of breaches of AWS customers
aws-firewall-factory
Easily improve the security of your web applications with aws firewall factory. Protect your valuable assets with seamless WAF deployment, updates, and staging, all efficiently managed centrally with Firewall Manager.
aws-incident-response-playbooks
Azure-AD-Incident-Response-PowerShell-Module
The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.
srvsachit's Repositories
srvsachit/Awesome-GPT-Agents
A curated list of GPT agents for cybersecurity
srvsachit/awesome-lists
Awesome Security lists for SOC/CERT/CTI
srvsachit/aws-firewall-factory
Easily improve the security of your web applications with aws firewall factory. Protect your valuable assets with seamless WAF deployment, updates, and staging, all efficiently managed centrally with Firewall Manager.
srvsachit/AzureAD-Attack-Defense
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
srvsachit/BestEdrOfTheMarket
Little AV/EDR bypassing lab for training & learning purposes
srvsachit/blocker
blocker is a Python package that checks indicators against block lists
srvsachit/CDM-Generator
Generate a matrix based on an inventory of InfoSec tools
srvsachit/Conferences
Conference slides
srvsachit/DarkGPT
DarkGPT is an OSINT assistant based on GPT-4-200K (recommended use) designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes.
srvsachit/darkweb-links
Verified links to darknet markets and darkweb sites on the Tor Network
srvsachit/Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md
srvsachit/Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
srvsachit/KQL
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.
srvsachit/kql_queries
KQL queries for Incident Response
srvsachit/learning-reverse-engineering
This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.
srvsachit/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
srvsachit/Microsoft-Analyzer-Suite
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
srvsachit/Microsoft-Blue-Forest
Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers
srvsachit/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
srvsachit/Portswigger_labs
This repository contains my writeups for the labs in PortSwigger's Web Security Academy platform. Each lab writeup includes the lab's name, description, and my step-by-step solution, as well as any additional notes or observations.
srvsachit/ScubaGear
Automation to assess the state of your M365 tenant against CISA's baselines
srvsachit/SecurityResearcher-Note
Cover various security approaches to attack techniques and also provides new discoveries about security breaches.
srvsachit/Sentinel-Queries
Collection of KQL queries
srvsachit/threat-composer
A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
srvsachit/ThreatHunting-Keywords-sigma-rules
Sigma detection rules for hunting with the threathunting-keywords project
srvsachit/TokenStealer
srvsachit/UK-Critical-Infrastructure
A collection of reports and case studies to understand the threat landscape for UK critical infrastructure
srvsachit/vulnerability-Checklist
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
srvsachit/waf-community-bypasses
srvsachit/wrongsecrets
Vulnerable app with examples showing how to not use secrets