PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.

Deploy a Private Burpsuite Collaborator using boto3 Python Library

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

A Docker image containing useful forensics tools.

A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

A curated list of the most important and useful resources about Threat Detection,Hunting and Intelligence.

CLI tool for open source and threat intelligence

Like Prometheus, but for logs.

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readines…

shodan bot on whatsapp

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as wel…

Nullcon 2020 and Owasp Seasides 2020 demo content and jupter notebooks

A python package for use in generating fake data for SOC and security automation.

A rapid API for the Project Sonar dataset

Linux Kernel Hacking

SIEGMA - Transform Sigma rules into SIEM consumables

Bucky (An automatic S3 bucket discovery tool)

Scripts to extract files from SCM directories left on web servers

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

List of resources and notes for passing the Certified Kubernetes Application Developer (CKAD) exam.

IntelOwl: manage your Threat Intelligence at scale

Translate STIX 2 Patterning Queries

A tool to assist with network-based hunting for GRU's Drovorub malware c2

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

Hands on labs and code to help you learn, measure, and build using architectural best practices.