syrkadian Goto Github PK

apt-lab-terraform

Purple Teaming Attack & Hunt Lab - Terraform

azuremonitorcommunity

An open repo for Azure Monitor queries, workbooks, alerts and more

badblood

BadBlood fills a Microsoft Active Directory Domain with a structure and thousands of objects.

bl-bfg

bruteloops

capsulecorp-ad-pentest-hyperv

Ansible + Vagrant + Hyper-V + Vulnerable AD 😎

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cohab_processes

A small Aggressor script to help Red Teams identify foreign processes on a host machine

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

deploy-deception

do-lab

dropbox

systemd service file for headless dropbox

efetch

Evidence Fetcher (efetch) is a web-based file explorer, viewer, and analyzer.

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

hostrecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

kql

KQL queries for Advanced Hunting

microsoft-sentinel2go

Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peasant

LinkedIn reconnaissance tool

plumhound

Bloodhound for Blue and Purple Teams

privesccheck

Privilege Escalation Enumeration Script for Windows

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red_team_tool_countermeasures

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

sigma

Main Rule Repository

soctests

sysmon-modular

A repository of sysmon configuration modules