netsec

Sysmon configuration file template with default high-quality event tracing

Cameradar hacks its way into RTSP videosurveillance cameras

Undetectable Windows Payload Generation

Utilities for Sysmon

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

Gorsair hacks its way into remote docker containers that expose their APIs

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network

Idiomatic nmap library for go developers

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

Stealthy backdoor for Windows operating systems

Hawkeye filesystem analysis tool

Open-source framework to detect outliers in Elasticsearch events

A permutation generation tool written in golang

Project dedicated to fight Layer 7 DDoS with proof of work, with an additional WAF and controller. Completed with full set of features and containerized for rapid and lightweight deployment.

A workshop on Packet Crafting using Scapy.

Operational Security utility and automator.

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.