scs-labs Goto Github PK

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

ansible-role-sysmon

Ansible role for installing Sysmon with popular config files included.

arkime

Arkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

atomic-threat-coverage

Actionable analytics designed to combat threats

aurora-incident-response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

azucar

Security auditing tool for Azure environments

blocklist-ipsets

ipsets dynamically updated with firehol's update-ipsets.sh script

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloudsploit

Cloud Security Posture Management (CSPM)

comes-in-handy

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

country-codes

cve-2020-1472

Exploit Code for CVE-2020-1472 aka Zerologon

detection-rules

Rules for Elastic Security's detection engine

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

elastic-reports

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

eramba_community

faraday

Collaborative Penetration Test and Vulnerability Management Platform

fir

Fast Incident Response

flightsim

A utility to generate malicious network traffic and evaluate controls

goalert

Open source on-call scheduling, automated escalations, and notifications so you never miss a critical alert

hafnium-microsoft-exchange-0day

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

halcyon-ide

First IDE for Nmap Script (NSE) Development.

images

invoke-zerologon

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf.