iknowjason Goto Github PK

ariacloud

A Docker container for remote penetration testing.

automatedemulation

An automated Breach and Attack Simulation lab with terraform. Built for IaC stability, consistency, and speed.

awesome-cloudsec-labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

azrecon

Az Enum & Recon Cheat Sheet

azurehound

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

bluetools

caldera_tines

Samples for Caldera and Tines automation playbooks

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

cmlab

Configuration Management (CM) Security Playground. A small enterprise security lab to practice automation + CM tooling like Ansible, Chef, Puppet, DSCv2, DSCv3, SaltStack.

conferences

Community contributions to SANS, DEFCON, ShmooCon, and ToorCon.

edge

Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.

enterprise-azure-policy-as-code

Enterprise-ready Azure Policy-as-Code (PaC) solution (includes Az DevOps pipeline)

enumerator

DNS SRV enumeration tool to look for VoIP enabled DNS records on a domain

for608-dev

ghostsplayground

hammer

An example of a mis-configured Rails application release under MIT license.

helk

The Hunting ELK

helk_azure

A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small HELK R&D lab in Azure.

logstash-example

Demonstration logstash configuration using a docker-compose

maclab

Multi-use Terraform template to quickly spin up a Mac Lab in AWS!

masscan_nmap

Automating masscan and nmap together.

ms-identity-pythonwebapp

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

nmap_nse

Some nmap NSE scripts for testing web applications for sensitive credentials and API keys that can sometimes be inadvertently exposed through environment variables or other mis-configurations.

panther

Detect threats with log data and improve cloud security posture

payloads

Caldera Operations Payloads

purplecloud

A little tool to play with Azure Identity - Azure Active Directory lab creation tool

saml-pentest

Some python and ruby examples for saml xml manipulation.