cybersecurity-labs Goto Github PK

mam-security-checklist

Checklist intended to be used as a baseline for assessing, designing, and testing the security of a MAM (Application Wrapping) solution

manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

mass_data_parse

Parse Through Gigs of Data with 1 line of code!

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

mastering-malware-analysis-second-edition

Mastering Malware Analysis - Second Edition, published by Packt.

mbedtls-fuzz

mcp-poc

Minifilter Callback Patching Proof-of-Concept

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

microsoft365dsc

Manages, configures, extracts and monitors Microsoft 365 tenant configurations

microsoftsecurity

Microsoft Security Guidance

microsoftwontfixlist

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

midfp-php

Mail Message-ID Fingerprinting

midnight-flag-ctf---writeups

mimikatz

A little tool to play with Windows security

mipt-ctf

A small course on CTF (wargames) for beginners [in Russian]

misc

misc-powershell-stuff

random powershell goodness

miscellaneous

Miscellaneous tools and patches that I have written/hacked/forked over the years

mobile_forensics

Methods & Tools for Mobile Malware Spyware & Forensics

mobilehackingcheatsheet

Basics on commands/tools/info on how to assess the security of mobile applications

monkey365

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Azure Active Directory security configuration reviews.

movies-for-hackers

🎬 A curated list of movies every hacker & cyberpunk must watch.

mq_scan

Scans an IBM MQ instance for unauthenticated access to admin channels.

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

multicast_bytecopy

kernel r/w exploit for iOS 15.0 - 15.1.1

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

mwtas

Time Attendance System with any WIFI enabled Device.

my-ctf-challenges

My CTF Challenges

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

nac_bypass

Script collection to bypass Network Access Control (NAC, 802.1x)