fadymarkram Goto Github PK

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin?

anubis

🔓 Subdomain enumeration and information gathering tool

arachni

Web Application Security Scanner Framework

chainsaw

Rapidly Search and Hunt through Windows Event Logs

collector-sidecar

Manage log collectors through Graylog

cve-2021-40444

CVE-2021-40444 PoC

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cve-2022-38374

CVE-2022-38374: XSS in Fortinet FortiADC 7.0.0 - 7.0.2, 6.2.0 - 6.2.4

empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

exocet-av-evasion

EXOCET - AV-evading, undetectable, payload delivery tool

graylog-fortigate-cef

A Graylog content pack containing a stream and dashboards for Fortinet Fortigate CEF logs

graylog2-server

Free and open source log management

installerfiletakeover

intelowl

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4jattacksurface

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

metasploit-framework

Metasploit Framework

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

mvt

MVT (Mobile Verification Toolkit) helps conducting forensics of mobile devices in order to find signs of a potential compromise.

o365-squatting

pisdr-image

🥧 A SDR Linux Distro for the Raspberry Pi and other SBC. Compatible out of the box with multiple SDR.

ralph

Ralph is the CMDB / Asset Management system for data center and back office hardware.

real-time-voice-cloning

Clone a voice in 5 seconds to generate arbitrary speech in real-time

rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

rodan

Rodan Exploitation Framework

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

sharpspray

Active Directory password spraying tool. Auto fetches user list and avoids potential lockouts.

sliver

Adversary Emulation Framework

sn0int

Semi-automatic OSINT framework and package manager