EAST

Extensible Azure Security Tool Extensible Azure Security Tool Later referred as E.A.S.T is tool for assessing Azure and to some extent Azure AD security controls. Primary use case of EAST is Security data collection for evaluation in Azure Assessments. This information JSON content can then be us...

ACE

Automated Collection and Enrichment The Automated Collection and Enrichment ACE platform is a suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data. The data is collected by running scripts on each computer without installing any...

magicRecon

MagicRecon: Fast, simple and effective MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats. With Magic Recon you...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

snoopy-ng

SensePost presents: /$$$$$$ /$$ $$ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$ /$$ /$$ | $$$$$$ | $$ $$ /$$ $$ /$$ $$ /$$ $$| $$ | $$ \ $$| $$ \ $$| $$ \ $$| $$ \ $$| $$ \ $$| $$ | $$ /$$ \ $$| $$ | $$| $$ | $$| $$ | $$| $$ | $$| $$ | $$ | $$$$$$/| $$ | $$| $$$$$$/| $$$$$$/| $$$$$$$/| $$$$$$$ / |/ |/...

aftermath

About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...

Skadi

pronounced “SKAH-Dee”: similar to Scotty but with a d sound is a giantess and goddess of hunting in Norse mythology Please Read Open Letter to the users of Skadi, CyLR, and CDQR Purpose Skadi is a free, open source collection of tools that enables the collection, processing and advanced analysis ...

hawk

Hawk Documentation and Resources Visit hawkforensics.io for comprehensive documentation including: Detailed installation and permissions guides Step-by-step tutorials and "How to" videos Troubleshooting help Best practices and usage examples What is Hawk? Hawk is a free, open-source PowerShell...

CVE-2024-23700-C2-Server

CVE-2024-23700 - C2 Server: Command and Control and Data Collection Server This project illustrates the design and construction of a Command & Control C2 server used for the experimental exploitation scenario of the privilege escalation vulnerability CVE-2024-23700. This server is responsible for...

exim-cve-2019-10149-data

Exim CVE Data Collection Data Collection Related to Exim Vulnerabilities CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 CVE Announcement: https://vulners.com/cve/CVE-2019-10149 Exploit Details: https://www.exploit-db.com/exploits/46974 Issue Timeline: https://seclists.org/fulldisclosure/2019/Jun/...

TeleGram-Scraper

Telegram Group Scrapper • API Setup Go to http://my.telegram.org and log in. Click on API development tools and fill the required fields. put app name you want & select other in platform Example : copy "apiid" & "apihash" after clicking create app will be used in setup.py • How To Install and Use...

Belati

Belati Belati - The Traditional Swiss Army Knife For OSINT Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT : Current Version v0.2.4 Belati In Action Why I Made this? Just for...

SIGINT_THROUGH_BROTHER_PRINTERS

SIGINTTHROUGHBROTHERPRINTERS My toolkit to collect data through vulnerable printers. uses cve 2017-7588 as entry access, need to develop the implant for the custom firmware, probably will use it for simulating a cyber attack one day...

unauthscout

UnauthScout UnauthScout is a CLI tool for unauthenticated OSINT reconnaissance on public developer platforms such as GitHub and GitLab. It standardizes the collection of publicly available user data using a consistent interface and normalized JSON output contracts. Problem Statement Public...

CVE-2019-6447

CVE-2019-6447 This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the...

SharpHound3

THIS IS NOW DEPRECATED IN FAVOR OF SHARPHOUND. DATA COLLECTED USING THIS METHOD WILL NOT WORK WITH BLOODHOUND 4.1+ SharpHound - C Rewrite of the BloodHound Ingestor Get SharpHound The latest build of SharpHound will always be in the BloodHound repository here Compile Instructions SharpHound is...

macOSTriageCollectionScript

macOSTriageCollectionScript A triage data collection script for macOS that utilises sysdiagnose with a few additions to gather useful triage data for investigations. What does the script collect? Data collected includes: sysdiagnose , a utility on a vareity of macOS/iOS operating systems that...

MAL-2026-17808 Malicious code in @s4yhiitestpoc/r2-https-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89449bafb4f816bd8605f45cedf0fec8ec0cff9088007a7a38aaea0a9db91ec On npm install, postinstall.js automatically collects installer-side identifying data — hostname, username, home directory, non-internal network...

cirro

Cirro es una plataforma extensible de investigación en seguridad que permite a investigadores y testers de penetración recolectar, analizar y visualizar entornos en la nube y relaciones de identidad a través de bases de datos de grafos. Construida con una arquitectura modular, Cirro puede...

thingsboard

Plataforma IoT todo en uno para la recopilación, el procesamiento y la visualización de datos, y la gestión de dispositivos. 💡 Comenzar • 🌐 Sitio web • 📚 Documentación • 📔 Blog • 🔗 LinkedIn 🚀 Opciones de instalación Instala ThingsBoard on-premises o utiliza ThingsBoard Cloud. 💡 Primeros pasos con...