This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Dracula OS is a Linux operating system meticulously designed for OSINT (Open Source Intelligence) and Cyber ​​Intelligence missions.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!

Go scanner to find web cache poisoning vulnerabilities in a list of URLs

Automated Adversary Emulation Platform

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Small toolkit for extracting information and dumping sensitive strings from Windows processes

OneForAll是一款功能强大的子域收集工具

Reverse shell that can bypass windows defender detection

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

For educational purposes only, samples of old & new malware builders including screenshots!

Notes about attacking Jenkins servers

CVE-2024-23897

OffSec OSINT Pentest/RedTeam Tools

Analysis of the vulnerability

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules, simulate logs, and undertake various security tasks,…

PacketSpy

A collection of awesome tools, books, resources, software, documents and cool stuff about IoT and HW security.

Tool to find CVEs and Exploits.

CVE-2023-6875 PoC

Simplify your life with leak detection in JavaScript. NipeJS streamlines the use of regex, making it effortless to uncover potential leaks.

Demonized Shell is an Advanced Tool for persistence in linux.

0up is a zero-knowledge, open-source, encrypted file sharing service

A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.

payload Execution by Fake Windows SmartScreen with requires Administrator privileges & Turn off real SmartScreen Filter

Nuclei Templates Collection

Insecure Camera Parsing and Intelligence