ahmedkhlief Goto Github PK

ahmedkhlief

apt-hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

awesome-cobaltstrike-defence

Defences against Cobalt Strike

awesome-incident-response

A curated list of tools for incident response

awesome-pcaptools

A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

cloud-security-attacks

Azure and AWS Attacks

crossc2

generate CobaltStrike's cross-platform payload

crossc2-1

generate CobaltStrike's cross-platform payload

cve-2022-22954

Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960

cve-2023-23397-poc

Exploit POC for CVE-2023-23397

cve-2023-23397-poc-using-interop-outlook

deepbluecli

dfirtriage

Digital forensic acquisition tool for Windows based incident response.

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

ghost-in-the-logs

Evade sysmon and windows event logging

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack

goreport

A Python script to collect campaign data from Gophish and generate a report

havoc

The Havoc Framework

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

kstrike

Stand-alone parser for User Access Logging from Server 2012 and newer systems

mac4n6

Collection of forensics artifacs location for Mac OS X and iOS

muddyc3-revived

ninja

Open source C2 server created for stealth red team operations

packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

pyexchangepasswordspray

Microsoft Exchange password spray tool with proxy support.

reverse-engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

reversesock5proxy

A tiny Reverse Sock5 Proxy written in C :V

sauron

A minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules.