drive-slow-homie Goto Github PK

1passwordsuite

Utilities to extract secrets from 1Password

aggressor

aggressor and pycobalt scripts.

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

apt_report

Interesting apt report collection and some special ioc express

attack-python-client

Python Script to access ATT&CK content available in STIX via a public TAXII server

awesome-iocs

A collection of sources of indicators of compromise.

azure-sentinel2go

Azure Sentinel2Go is an open source project developed to expedite the deployment of an Azure Sentinel lab.

binwalk

Firmware Analysis Tool

blacksmith

Building environments to replicate small networks and deploy applications

bloodhound-notebook

BloodHound Cypher Queries Ported to a Jupyter Notebook

bloodhound-tools

Collection of tools that reflect the network dimension into Bloodhound's data

chrometools

A collection of tools to abuse chrome browser

cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

crossbuild

:earth_africa: multiarch cross compiling environments

custom_url_scheme

Tool to create a template to abuse Custom URL Schemes

cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

darling

Darwin/macOS emulation layer for Linux

dnscat2

dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

dylib-hijack-scanner

JavaScript for Automation (JXA) version of Patrick Wardle's tool that searches applications for dylib hijacking opportunities

dynamichttp

empire

Empire is a PowerShell and Python post-exploitation agent.

evasions

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

evercookie

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.

go4arun

Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process

healthinspector

JXA situational awareness helper by simply reading specific files on a filesystem

helk

The Hunting ELK

infosec-jupyter-book

The Infosec Community Definitive Guide to Jupyter Notebooks

infosec-jupyterthon

A community event for security researchers to share their favorite notebooks

injectcheck