flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...

M365-Assess

M365 Assess Comprehensive M365 Security Assessment Tool Read-only Microsoft 365 security assessment for IT consultants and administrators...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

ravage

Ravage Ravage is an evidence-first CLI for assessing a running web application that you own or are explicitly authorized to test. It combines deterministic reconnaissance and validation with an optional model-driven attack loop, while keeping scope, authentication, traffic accounting, and evidenc...

AD_Enumeration_Hunt

ADEnumerationHunt Description Welcome to the AD Pentesting Toolkit! This repository contains a collection of PowerShell scripts and commands that can be used for Active Directory AD penetration testing and security assessment. The scripts cover various aspects of AD enumeration, user and group...

EntraFalcon

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

hacker-container

Hacker Container Container with all the list of useful tools/commands while hacking Kubernetes Clusters. Read more about it in the blogpost https://blog.madhuakula.com/hacker-container-for-kubernetes-security-assessments-7d1522e96073 List of the tools/commands/utilities available in container are...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

adPEAS

adPEAS v2 — Active Directory Privilege Escalation Awesome Scripts Comprehensive Active Directory security assessment — zero dependencies, single file, ready to go. What is adPEAS? adPEAS is a PowerShell-based security assessment tool that identifies misconfigurations, vulnerabilities, and privile...

CVE-2024-6387

CVE-2024-6387 Bulk Scanning Tool for OpenSSH CVE-2024-6387 and 19 Other OpenSSH CVEs Overview Introducing a new OpenSSH bulk scanning tool! Quickly scan multiple SSH servers for security vulnerabilities like CVE-2024-6387, CVE-2006-5051, and others. This tool is designed for scanning and reportin...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

SecAssessment-GapDetection-Thesis

D3FENDer - Security Assessment & Gap Detection Tool Using MITRE ATT&CK & D3FEND Frameworks D3FENDer is a rule-based CLI tool developed by Michael for his thesis titled Development of a security assessment and gap detection system using the MITRE ATT&CK and D3FEND Frameworks. It is designed to...

CredSpy

CredSpy Enumerate Microsoft Entra ID authentication methods for email addresses using the public GetCredentialType API. This is the same endpoint the Microsoft login page uses when you enter a username. In contrast to most tools using the GetCredentialType method, CredSpy also shows the...

apk-interceptor

apk-interceptor Android 深层链接、Intent 和 WebView 桥接评估辅助工具 apk-interceptor 是一个专为授权应用安全评估而设计的便携式 Android 测试 APK。它帮助安全工程师验证 Android 应用如何处理外部入口点，例如自定义 URI 方案、深层链接、导出的 Activity 和 WebView JavaScript 桥接。 该工具有意受限： 它不声明 android.permission.INTERNET 它不向外部服务器发送数据 它不执行 Shell 命令 它不需要 root、Magisk、Frida 或运行时插桩...

MSFinger

MSFinger - Microsoft Network Service Fingerprinting Tool Version: 1.0 Author: Laurent Gaffie Company: Secorizon Overview MSFinger is a high-performance network fingerprinting tool designed for internal network reconnaissance. It rapidly identifies Microsoft services, detects security...

secator

ペネトレーションテスターのスイスアーミーナイフ。 機能 • サポートされているコマンド • インストール • 使い方 • ドキュメント • Discordで参加しよう！ secatorは、セキュリティ評価に使用されるタスクおよびワークフローランナーです。数十の有名なセキュリティツールをサポートしており、ペネトレーションテスターやセキュリティ研究者の生産性向上を目的として設計されています。 機能 厳選されたコマンド一覧 統一された入力オプション 統一された出力スキーマ CLIとライブラリとしての使用 Celeryによる分散オプション シンプルなタスクから複雑なワークフローまで カスタマイズ...

365Inspect

Purpose Further the state of Microsoft 365 security by authoring a PowerShell script that automates the security assessment of Microsoft 365 environments. Soteria Inspect Soteria Inspect is born from the 365Inspect project and is Soteria's SaaS solution to aid in assessing the security of a...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...