cadmius Goto Github PK

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharphound

C# Data Collector for BloodHound

smtp-user-enum

Username guessing tool primarily for use against the default Solaris SMTP service. Can use either EXPN, VRFY or RCPT TO.

snmp-brute

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

socialscan

Python library for accurately querying username and email usage on online platforms

socksoverrdp

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

sof-elk

Configuration files for the SOF-ELK VM, used in SANS FOR572

spidercat

SpiderCat is an advanced reconnaissance payload that aims to concatanate targets into an Obsidian spider web framework. It allows security professionals to keep track of their targets and how they are connected. SpiderCat conducts advanced reconnaissance on targets, gathering intel such as the users email, systems information, geolocation & more

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

splunk-search-queries

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

static-binaries

Various *nix tools built as statically-linked binaries

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

sublist3r

Fast subdomains enumeration tool for penetration testers

subscraper

Subdomain and target enumeration tool built for offensive security testing

tap

The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

teams-for-linux

Unofficial Microsoft Teams for Linux client

threathunter-playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

threathunting

An informational repo about hunting for adversaries in your IT environment.

threatpursuit-vm

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

trufflehog

Find and verify secrets

unsafelinks

deobfuscating microsoft safelinks

untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

username-anarchy

Username tools for penetration testing

vmware-host-modules

Patches needed to build VMware (Player and Workstation) host modules against recent kernels

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

web-shells