Cyber Security Foundation

fakelogonscreen

Fake Windows logon screen to steal passwords

TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…

PowerZure

PowerShell script to interact with Azure

ppldump

BYOD (Bring Your Own Driver) Approach to Dumping PPL Procs (Shellcode Injection lol)

aws-terraform-casper

A tool for detecting ghost resources running on your aws cloud

OSINT-Framework

OSINT Framework

kube-scan

kube-scan: Octarine k8s cluster risk assessment tool

beef

The Browser Exploitation Framework Project

awesome-bbht

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain. Feel free to fork, and add your own tools.

PowerShellArmoury

A PowerShell Armoury for Penetration Testers or other random security guys

AOSP-DownloadProviderDbDumperSQLiWhere

PoC Exploiting SQL Injection in Android's Download Provider in Selection Parameter (CVE-2019-2198)

DVSA

a Damn Vulnerable Serverless Application

HELK

The Hunting ELK

chainoffools

A PoC for CVE-2020-0601

misp-training

MISP trainings, threat intel and information sharing training materials with source code

BLAKE3

The BLAKE3 cryptographic hash function

check-cve-2019-19781

Test a host for susceptibility to CVE-2019-19781

velociraptor

Dig Deeper....

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

flare-vm

Spray-AD

A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.

PlaystoreDownloader

A command line tool to download Android applications directly from the Google Play Store

GitMiner

Tool for advanced mining for content on Github

Privilege-Escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

elk-detection-lab

An ELK environment containing interesting security datasets.

MemLabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

gobuster

Directory/File, DNS and VHost busting tool written in Go

SharpSploit

SharpSploit is a .NET post-exploitation library written in C#

Awesome-WAF

🔥 Everything awesome about web-application firewalls (WAF).

sigma

Generic Signature Format for SIEM Systems