Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

Machine Learning automation and tracking

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

AWSGoat : A Damn Vulnerable AWS Infrastructure

The all-in-one Red Team extension for Web Pentester 🛠

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

An API for hashing password in PostgreSQL with Golang

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

A Python based ingestor for BloodHound

A next-generation crawling and spidering framework.

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.

Files + Writeups for DownUnderCTF 2022 Challenges

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. It is designed to maintain result reliability with an increased number of threads.

Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

Semi-automatic OSINT framework and package manager

RedEye is a visual analytic tool supporting Red & Blue Team operations

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

CA Optics - Azure AD Conditional Access gap analyzer

🔬Collection(-BIGGEST-) of malware, ransomware, RATs, botnets, stealers, etc.

Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler

freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

Monitor linux processes without root permissions

Identify technology on websites.

A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件

A swiss army knife for pentesting networks