ovidsec Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

addsecurityexceptionandroid

android-keyboard-gadget

Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.

antivirus-artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

atomic-red-team

Small and highly portable detection tests.

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome-reversing

A curated list of awesome reversing resources

base1

Binary encoding inspired by unary numbers

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

beroot

Windows Privilege Escalation Tool

binja_explain_instruction

A plugin that adds a popup window to Binary Ninja that explains in simple English what an assembly instruction does

bloodhound

Six Degrees of Domain Admin

bloodhound.py

A Python based ingestor for BloodHound

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

cb-response-smb1-utility

A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.

cheatsheet-god

Penetration Testing / OSCP Biggest Reference Bank

cheatsheets

churrasco

Changes for Visual Studio 2013

collisions

Hash collisions

cr3dov3r

Know the dangers of credential reuse attacks.

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

ctfs

cutter

A Qt and C++ GUI for radare2 reverse engineering framework

daily-dose-of-malware

Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.

deathstar

Automate getting Domain Admin using Empire (https://github.com/EmpireProject/Empire)

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

donpapi

Dumping DPAPI credz remotely

dotfiles

:copyright: home! sweet home

doublepulsar-detection-script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.