active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

android-security-awesome

A collection of android security related resources

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

ataschert

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attacksurfaceanalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-incident-response

A curated list of tools for incident response

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

awesome-web-security

🐶 A curated list of Web Security materials and resources.

broot

A new way to see and navigate directory trees : https://dystroy.org/broot

centos8_hardening

In Progress

cli

The command line vault (Windows, macOS, & Linux).

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

corethreatagent

Collect security logs and send them over syslog

cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

dailyioc

IOC from articles, tweets for archives

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

discourse

A platform for community discussion. Free, open, simple.

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

falco

Cloud Native Runtime Security

free-security-ebooks

Free Security and Hacking eBooks

gitbook

📝 Modern documentation format and toolchain using Git and Markdown

gophish

Open-Source Phishing Toolkit

hacking-security-ebooks

Top 100 Hacking & Security E-Books (Free Download)

hardware-and-firmware-security-guidance

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

how-to-secure-a-linux-server

An evolving how-to guide for securing a Linux server.