manuka

Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...

VECTR

VECTR documentation: https://docs.vectr.io VECTR Community Discord Channel: https://discord.gg/2FRd8zf728 VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. VECTR provides the...

privacy-first-network

Privacy Router Stack Whole-home VPN router with network-level kill switch - Protect every device on your network with OpenWrt, WireGuard, and AmneziaWG. No apps required. 🤖 Using an AI coding agent? Give it access to this entire repo and read AGENTS.md for guided deployment. Supports Claude, GPT,...

browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

ai-kill-chain

Extended Cyber Kill Chain for AI-Era Threats An update to the Lockheed Martin Cyber Kill Chain for defenders working against LLM and agentic AI attacks. Adds a pre-attack stage for model supply chain compromise. Adds AI-specific sub-techniques to each of the original seven stages. Splits the...

sfop

Segmentation Fault-Oriented Programming SFOP Este es el repositorio de artefactos para la técnica de explotación Segmentation Fault-Oriented Programming. Colección de artefactos Aquí describimos brevemente los artefactos de este repositorio. En total, hay ocho artefactos diferentes, compuestos po...

Raccine

Raccine Una protección sencilla contra el ransomware Por qué Con frecuencia vemos ransomware que elimina todas las copias de sombra mediante vssadmin. ¿Y si pudiéramos interceptar esa petición y matar el proceso que la invoca? Intentemos crear una vacuna sencilla. Cómo funciona Registramos un...

ssl-kill-switch2

SSL Kill Switch 2 Herramienta de caja negra para deshabilitar la validación de certificados SSL/TLS - incluido el anclaje de certificados certificate pinning - dentro de aplicaciones iOS y macOS. Segunda iteración de https://github.com/iSECPartners/ios-ssl-kill-switch . Descripción Una vez cargad...

CVE-2026-32941

Una vulnerabilidad en todo el framework de Sliver C2 permite una Denegación de Servicio remota no autenticada al provocar Asignación de Memoria No Controlada CWE-789 / CWE-400, lo que lleva a un fallo de Agotamiento de Memoria OOM en todo el proceso. Referencias: Tenable Pasos de reproducción: 1...

FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...

killchain

killchain “Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependent tool sets are: 1...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

Excalibur

Excalibur will soon be updated to utilize Metasploit over the Bashbunny. Excalibur Excalibur is an Eternalblue exploit based "Powershell" for the Bashbunny project. It's purpose is to reflect on how a "simple" USB drive can execute the 7 cyber kill chain. Excalibur may be used only for...

AD-Attack-Defense

Ataque y Defensa de la Cadena de Eliminación de Active Directory Resumen Este documento fue diseñado para ser un recurso útil e informativo para aquellos que buscan comprender las tácticas, técnicas y procedimientos TTP específicos que los atacantes aprovechan para comprometer Active Directory, a...

inficere

inficere 基于 fractalG 的 onyx-the-black-cat（https://github.com/gdbinit/onyx-the-black-cat）构建的 Mac OS X rootkit 公开版本 仅在 Mountain Lion 10.8.2 至 10.8.5 上测试过。不保证在其他版本上能正常工作。 功能 进程隐藏——对 'ps PID'、'ps aux'、活动监视器、top 等隐藏 文件/目录隐藏 用户隐藏——对 'who'、'w' 隐藏指定用户 自隐藏——对 kextstat 和 volatility 隐藏模块本身 反终止 PID 转 UID 0...

LSTAR-EN

LSTAR - Aggressor Translated to English! By Google Translate and Deepl For the purpose of simplifying CS right-click and facilitating self-integration, refer to a large number of post-infiltration plugins Refactored and enriched host-related credential acquisition, multi-level intranet penetratio...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office 安全功能绕过 CVE-2026-21509 是一个 Microsoft Office 安全功能绕过漏洞 CVSS 7.8 ，被 APT28（俄罗斯黑客组织） 积极利用攻击乌克兰 安全决策中依赖不可信输入（CWE-807 ）——"破坏 kill bit" 允许通过恶意文档绕过受保护视图 和OLE 缓解措施 影响 Office 2016、2019、2021、2024、Microsoft 365 应用 2026年1月 发布紧急带外补丁 概述 CVE-2026-21509 是 Microsoft Office...

ssl-kill-switch3

SSL Kill Switch 3 ¡La próxima generación del tweak de iOS SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2 con muchas más funcionalidades! ¿Qué hay de nuevo? CORREGIDO Soporte Fishhook iOS 15+, ARM64/ARM64e, para que puedas engancharte en la era sin jailbreak CORREGIDO Soporte Rootles...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...