The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).

A collection of learning resources for curious software engineers

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Awesome Incident Response

A simple threat modeling tool to help humans to reduce time-to-value when threat modeling

Real-time, container-based file scanning at enterprise scale

Projects for security students

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

Production-ready detection & response queries for osquery

Aftermath is a free macOS IR framework

Enabling 2fac confirmation for newly connected USB devices

Passive hostname, domain and IP lookup tool for non-robots

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Redress - A tool for analyzing stripped Go binaries

AWS CloudSaga - Simulate security events in AWS

A repository of breaches of AWS customers

Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.

A curated list of awesome Kubernetes security resources

A knowledge base of actionable Incident Response techniques

🎓 Path to a free self-taught education in Computer Science!

Find, verify, and analyze leaked credentials

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Repository with selected IOCs and YARA rules for threat hunting.

Simple yara rule manager

Main Build directory

Re-play Security Events

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team…