defenselessV1

defenselessV1 Defenseless is a vulnerable web application written in PHP/MySQL. This is the first version of this application. The purpose of this application is to create security awareness among developers and new guys in application security. It would soon be updated with with more bugs and a...

king-phisher

King Phisher Phishing Campaign Toolkit King Phisher is no longer being maintained. Installation For instructions on how to install, please see the INSTALL.md file. After installing, for instructions on how to get started please see the wiki. Overview King Phisher is a tool for testing and promoti...

DDWPasteRecon

DDWPasteRecon Pastesites are websites that allows users to share plain text through public posts called “pastes.” Once attackers compromise the external perimeter and gain access to the internal resources they release the part of data on the "paste" sites like pastebin or hastebin. As these hacke...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

Phishing-Simulation

Phishing-Simulation Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment without any actual setup - no domain, no infrastructure, no actual email address to assess people's action on any given situation and gives ability to...

CiclopeClic

CiclopeClic Controlled AI-driven security awareness tool Welcome to CiclopeClic! 🔐 Imagine having the power to generate secure, personalized links for ethical phishing campaigns at your fingertips. That's CiclopeClic! Our tool is revolutionizing how security teams conduct controlled phishing test...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

worldmonitor

World Monitor 简体中文 | 日本語 Real-time global intelligence dashboard — AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface. !Commodity...

gophish

Gophish Gophish：开源钓鱼工具包 Gophish 是一个开源钓鱼工具包，专为企业和渗透测试人员设计。它能够快速轻松地设置和执行网络钓鱼演练以及安全意识培训。 安装 安装 Gophish 非常简单 —— 只需下载并解压包含适用于你系统版本的 zip 压缩包，然后运行其中的可执行文件。Gophish 提供 Windows、Mac 和 Linux 平台的可执行文件。 从源码构建 如果你从源码构建，请注意 Gophish 需要 Go v1.10 或更高版本！ 要从源码构建 Gophish，只需运行 git clone...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

Reel

Reel Phishing simulation and security awareness framework with configurable workflows, campaign management, and optional credential proxy. Quickstart OPS USE 1. Clone the repository and cd into it. 2. run ./deploy.sh - this will configure the pre-preqs for you, assuming you are on ubuntu. 3. Run...

reconerator

概述 这是一个自定义的 .NET 程序集，用于执行一系列态势感知活动。目前包含以下功能集： BASIC - 从磁盘和注册表获取信息。 LDAP - 允许执行自定义的 AD LDAP 查询。 RESOLVEHOST - 执行 DNS 查询解析。 INDEXSEARCH - 搜索 Windows 索引服务中的本地文件和电子邮件（按文件名和内容）。 PROXYCHECK - 显示访问指定 URL 时将使用的代理服务器。 我在编写此工具时并不知道 GhostPack 正在开发中；最终我们几乎同时发布了各自的工具。实际上，GhostPack 现在的功能要丰富得多。我已移除 PrivescCheck...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

free-interactive-ai-training-materials

Todos los archivos se movieron bajo la organización oficial del proyecto. No dudes en contribuir a este repositorio: https://github.com/ransomleak/training-security-awareness...

protections-artifacts

Protections Artifacts Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint. Protections-Artifacts is the home of our detection logic rules, yara, etc for Elastic Security for endpoint. At...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi 是一个用于 Linux 的 2.4 GHz 和 5 GHz WiFi 及蓝牙频谱感知工具。它集成了 WiFi 扫描、蓝牙低功耗（BLE）和经典蓝牙发现、软件定义无线电频谱分析（HackRF、Ubertooth）、GPS 追踪、FAA RemoteID 无人机检测、无人机/漫游车远程操作，以及将 ECS 8.17 索引到 Elasticsearch 或 OpenSearch，统一在一个平台上。完全使用 Python 3 编写。 该项目包含四个可独立或协同工作的组件： 组件| 界面| 用途 ---|---|--- Sparrow-WiFi|...

camjacking

Camjacking CamJacking es un framework de formación en concienciación sobre seguridad de nivel empresarial, diseñado para simular ataques de phishing realistas dirigidos a los permisos de cámara y a la concienciación del usuario 🎯 ¿Qué es CamJacking? CamJacking es un framework de formación en...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...