Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Microsoft 365 Defender - Resource Hub

A shorter, less intimidating list of infosec resources helpful for anyone trying to learn.

A collection of captive portals for phishing using a WiFi Pineapple

A place to share SCYTHE modules with the community.

A place to share attack chains for testing people, process, and technology with the entire community. The largest, public library of adversary emulation and adversary simulation plans! #ThreatThursday

Automate the creation of a lab environment complete with security tooling and logging best practices

A curated list of awesome YARA rules, tools, and people.

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

A toolset to make a system look as if it was the victim of an APT attack

Ransomware simulator written in Golang

Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.

These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.

Identify privilege escalation paths within and across different clouds

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.

A playground to play with Powershell using Jupyter Notebooks.

Mind maps / flow charts to help with privilege escalation on the OSCP.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A Command-line tool which leverages the Tenable.io API to reduce the time it takes to get information that is common during remediation or a troubleshooting event

PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Wind…

Creates a Transit Gateway with two server VPCs and a security VPC

Random Code Store