muhammeday9un Goto Github PK

amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

amsitrigger

The Hunt for Malicious Strings

avml

AVML - Acquire Volatile Memory for Linux

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-incident-response

A curated list of tools for incident response

awesome-yara

A curated list of awesome YARA rules, tools, and people.

bloodhound

Six Degrees of Domain Admin

breacher

An advanced multithreaded admin panel finder written in python.

cylr

CyLR - Live Response Collection Tool

digital-forensics-books-wiki

forensicssetup

An open source project aimed to replicate the Windows SIFT Machine and tools used during SANS Courses minus any payware software.

forensicstools

A list of free and open forensics analysis tools and other resources

free-automated-malware-analysis-sandboxes-and-services

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can used to bypass local security restrictions in misconfigured systems

hindsight

Web browser forensics for Google Chrome/Chromium

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

muhammeday9un.github.io

naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-cheatsheets

persistencesniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Made with ❤️ by @last0x00

php-reverse-shell

process_ghosting

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

rules

Repository of yara rules

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sigma

Main Rule Repository

smartbrute

Password spraying and bruteforcing tool for Active Directory Domain Services