Kill AV/EDR leveraging BYOVD attack. Contribute to Helixo32/NimBlackout development by creating an account on GitHub.

This function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder and tcpdump tools, and run the nbtscan tool. - alp...

For some fun and a fair bit of profit

Introduction Attack Execution Detection Other Detections and Indicators References Introduction During a recent presentation I examined various ways of persisting within Active Directory (AD) and how every technique can be detected, using both intrinsic IoC…

Efficient, extensible, flexible, open source vulnerability scanning.


Introduction

Nuclei is a fast, efficient, and extensible vulnerability scanner. It can scan thousands of hosts in just a few minutes.

The Nuclei engine uses YAML-based templates to define…

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers - fkasler/cuddlephish

An OSINT tool that helps detect members of a company with leaked credentials - infobyte/emploleaks

Microsoft ICSpector (ICS Forensics Tools framework) is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. - microsoft/ics-forensics-tools

RedTeaming TTPs
Bug Hunting
Web PenTest
Web Security
Binary Analysis
Exploit DEV
Malware DEV
Malware Analysis
BlueTeaming
Threat Hunting
SOC
CSIRT
FORENSICS
Open-Source Intelligence(OSINT)
Cybersec Tools

Blazing fast GraphQL discovery & fingerprinting toolbox. - Escape-Technologies/goctopus

HEGO Offensive Cybersecurity Wiki

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters - TheWover/donut

NVISO enjoys an excellent working relationship with SANS and has been involved as Instructors and Course Authors for a variety of their courses: For SEC511, Continuous Monitoring and Security Opera…

Interesting APT Report Collection And Some Special IOCs - blackorbird/APT_REPORT

On August 24th, 2022, we reported a vulnerability to Netlify affecting their Next.js "netlify-ipx" repository which would allow an attacker to achieve persistent cross-site scripting and full-response server side request forgery on any website out of the…

Catching a reverse shell over netcat is great…until you accidentally Ctrl-C and lose it. These techniques let you upgrade your shell to a proper TTY

Top disclosed reports from HackerOne. Contribute to reddelexc/hackerone-reports development by creating an account on GitHub.

Contribute to razzorsec/AuditorsRoadmap development by creating an account on GitHub.

In this repository I'll host my research and methodologies for auditing vulnerabilities - GitHub - OlivierLaflamme/Auditing-Vulnerabilities: In this repository I'll host my researc...