Sysmon configuration file template with default high-quality event tracing

Cameradar hacks its way into RTSP videosurveillance cameras

Undetectable Windows Payload Generation

🔐 An application to securely communicate passwords over the web. Passwords automatically expire after a certain number of views and/or time has passed. Track who, what and when.

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

Utilities for Sysmon

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @openziti

Idiomatic nmap library for go developers

Invisible network protocol sniffer

Gorsair gives root access on remote docker containers that expose their APIs

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

Project dedicated to fight Layer 7 DDoS with proof of work, with an additional WAF and controller. Completed with full set of features and containerized for rapid and lightweight deployment.

Stealthy backdoor for Windows operating systems

Hawkeye filesystem analysis tool

A workshop on Packet Crafting using Scapy.

802.11 Attack Tool

Operational Security utility and automator.

Open-source framework to detect outliers in Elasticsearch events

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.