BlackLotus UEFI Windows Bootkit

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Common Open Research Emulator

Automatically created C2 Feeds

A "hooray I am useful" Cobalt Strike Team Server scanner

[Suspended] FakeNet-NG - Next Generation Dynamic Network Analysis Tool

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

A fork and successor of the Sulley Fuzzing Framework

🔥🔥🔥Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++, the architecture and usage like Cobalt Strike

Cobalt Strike Malleable C2 Design and Reference Guide

Hunts out CobaltStrike beacons and logs operator command output

Scan files or process memory for CobaltStrike beacons and parse their configuration

Scripts to generate an Internet simulation

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…

SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data with optional output modules, such as MISP.

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

Materials for Windows Malware Analysis training (volume 1)

Hybrid + Identity Cyber Range

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team p…

🍯 T-Pot - The All In One Honeypot Platform 🐝

Fast Go Application Scanner

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

An experimentation and research platform to investigate the interaction of automated agents in an abstract simulated network environments.

OctoPrint is the snappy web interface for your 3D printer!

A curated list of Awesome Threat Intelligence resources