Playbooks for SOC Analysts

Automated security lab provisioning

ScriptSentry finds misconfigured and dangerous logon scripts.

Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

WiFi Penetration Testing & Auditing Tool

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, si…

The best free and open-source automated time tracker. Cross-platform, extensible, privacy-focused.

A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

Comfortably monitor your Internet traffic 🕵️‍♂️

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

host your own cloud for the remarkable

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

A tool to help you find unsubscribe links in your emails

🚀 The open-source alternative to Twilio.

🕳 bore is a simple CLI tool for making tunnels to localhost

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024

Like diff but for PostgreSQL schemas

Fully automated homelab from empty disk to running services with a single command.

A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.

Wifi MQTT Data Logging via an esp8266 for the Ikea VINDRIKTNING PM2.5 air quality sensor

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

A tool to detect whether a PDF has a bad redaction

📚 Effortless documentation, done right.

"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

An evolving how-to guide for securing a Linux server.

Design document for Smart Legal Contracts Templates and Instances

Search with BERT vectors in Solr, Elasticsearch, OpenSearch and GSI APU

Simple animated GIF screen recorder with an easy to use interface

A JSON-like data structure (a CRDT) that can be modified concurrently by different users, and merged again automatically.