twenty21 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

api-security

OWASP API Security Project

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

archerysec

Centralize Vulnerability Assessment and Management for DevSecOps Team

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

azure-security-center

Welocme to the Azure Security Center community repository

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

caldera

Automated Adversary Emulation

cascade-server

CASCADE Server

cheatsheet-god

Penetration Testing Biggest Reference Bank - OSCP / PTP & PTX Cheatsheet

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudcopy

This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

conjur-credentials-plugin

Conjur plugin for securely providing credentials to Jenkins jobs

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

devopskit-docs

ffmpeg

Mirror of https://git.ffmpeg.org/ffmpeg.git

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4shell-detector

Detector for Log4Shell exploitation attempts

microburst

A collection of scripts for assessing Microsoft Azure security

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

nmapautomator

A script that you can run in the background!

nse-log4shell

Nmap NSE scripts to check against log4shell or LogJam vulnerabilities (CVE-2021-44228)

objection

📱 objection - runtime mobile exploration

openedr

Open EDR public repository

powerzure

PowerShell script to interact with Azure

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.