cybersecops Goto Github PK

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

kubescape

kubescape is the first tool for testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by to NSA and CISA (https://www.nsa.gov/News-Features/Feature-Stories/Article-View/Article/2716980/nsa-cisa-release-kubernetes-hardening-guidance/)

kuiper

Digital Forensics Investigation Platform

kustquerylanguage_kql

Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting

lapstoolkit

Tool to audit and attack LAPS environments

laurel

Transform Linux Audit logs for SIEM usage

ldapmonitor

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

ldapnomnom

Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)

ldd2bh

Convert ldapdomaindump to Bloodhound

licensing

Microsoft 365 licensing diagrams

limeaide

A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.

limon

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

linux-privilege-escalation

This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machines and CTFs with examples.

live-forensicator

Powershell Script to aid Incidence Response and Live Forensics

localdllparse

log4j-affected-db

log4j-finder

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228)

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA's Rapid Action Force team to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

log4j-scanner-1

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

log4jake

log4jscanner

log4shell-detector

Detector for Log4Shell exploitation attempts

log4shell-iocs

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

loki

Loki - Simple IOC and Incident Response Scanner

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

ma2tl

macOS forensic timeline generator using the analysis result DBs of mac_apt

maad-af

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Azure AD.

machine-learning-engineering-with-python

Machine Learning Engineering with Python

mail_to_misp

Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.