blueteam

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Investigate malicious Windows logon by visualizing and analyzing Windows event log

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

The goal of this repository is to document the most common techniques to bypass AppLocker.

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Snoop — инструмент разведки на основе открытых данных (OSINT world)

A collection of awesome security hardening guides, tools and other resources

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

Scan your code for security misconfiguration, search for passwords and secrets. 🔍

Bloodhound for Blue and Purple Teams

WADComs is an interactive cheat sheet, containing a curated list of Unix/Windows offensive tools and their respective commands.

红蓝对抗跨平台远控工具

🍓📡🍍Monitor illegal wireless network activities. (Fake Access Points), (WiFi Threats: KARMA Attacks, WiFi Pineapple, Similar SSID, OPN Network Density etc.)

This repository contains full code examples from the book Gray Hat C#

Data leak checker & OSINT Tool

Windows Hardening settings and configurations

Test Blue Team detections without running any attack.

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）查杀工具

Find cloud assets that no one wants exposed 🔎 ☁️

Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.

Bi-weekly hunting queries

Blue Team Scripts

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.

Monitoring your Slack workspaces for sensitive information