Mindmaps

Pentesting Azure Mindmap Get the Global Admin access 💥 with this mindmap for Azure penetration tests. Feel free to pull request with your techniques ! ❤️ Developed by Alexis Danizan Released as open source by Synacktiv 🥷 📖 Resources Useful resources used to build this mindmap, many outstanding...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

threatbox

Threatbox - Standard Attack Platform ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of...

detectar_cve-2024-3094

检测cve-2024-3094...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

CVE-2019-1388

CVE-2019-1388...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Wordpress Really Simple Security authentication bypass flaw in Docker Description The Really Simple Security plugins Free, Pro, and Pro Multisite for WordPress, versions 9.0.0 to 9.1.1.1, are affected by an authentication bypass vulnerability. This issue arises from improper erro...

powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

tpm-vuln-checker

Herramienta de Escaneo de Vulnerabilidades TPM 2.0 Esta es una herramienta escrita en Golang diseñada para escanear múltiples vulnerabilidades de TPM utilizando la librería tpm-vuln-checker de Immune Security. Requisitos Para usar esta herramienta, necesitarás lo siguiente: Controlador de...

yara-rules

yara-rules Una colección de mis reglas de yara...

Threat_Hunting

ThreatHunting Algunas consultas de búsqueda de amenazas de CrowdStrike útiles para los miembros del equipo azul y los cazadores de amenazas...

awesome-windows-domain-hardening

Awesome Windows Domain Hardening Una lista curada de increíbles técnicas de endurecimiento hardening de seguridad para Windows. Creada por gepeto42 y PaulWebSec, pero muy inspirada en la investigación de PyroTek3. Resumen Este documento resume la información relacionada con la charla de Pyrotek y...

KQL-threat-hunting-queries

Caza/detección de amenazas mediante consultas KQL root@kitploit: | |/ / | | | | | | | | | / | | | | | | | | | \ | | | | \ | |/ | | ' | | | | | | | | || | | | | / \ | | | || | | | | | | | | | || | | | | . | || | | | | | | !NOTE 27 de enero: Tras casi un año de contribuciones, este repositorio...

Shellcode-Hide

Este repositorio no tiene un README...

TelemetrySource

TelemetrySource Proyecto creado para mapear las funciones responsables de desencadenar eventos de diversas fuentes de telemetría. Hoja de mapeo principal: Hoja de cálculo de Google de mapeo de eventos Fuentes mapeadas actualmente: Sysmon Eventos de seguridad de Windows...

macstealer

MacStealer: Bypass de Aislamiento de Clientes Wi-Fi 1. Introducción Este repositorio contiene MacStealer. Puede probar redes Wi-Fi para detectar bypasses de aislamiento de clientes CVE-2022-47522. Nuestro ataque puede interceptar robar tráfico hacia otros clientes en la capa MAC, incluso si los...

presentations

Presentaciones de Christopher Peacock Año| Organización| Título de la charla| Diapositivas| Vídeo ---|---|---|---|--- 2023| BSides Tampa| Purple Team 101| Diapositivas| 2022| SANS PenTest HackFest 2022| En las trincheras: lo que se debe y no se debe hacer en Purple Team| Diapositivas| YouTube 202...

ConPresentations

ConPresentations Diapositivas, recursos y grabaciones variadas de algunas de mis presentaciones en conferencias. Presentaciones en Conferencias Keynote de BSidesCanberra 2023: "Cuando los exploits no son binarios" Diapositivas OffensiveCon 2023: "El bug de Print Spooler que no fue" con James...