Sysmon configuration file template with default high-quality event tracing

Cameradar hacks its way into RTSP videosurveillance cameras

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @openziti

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

Undetectable Windows Payload Generation

Utilities for Sysmon

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

802.11 Attack Tool

Idiomatic nmap library for go developers

Gorsair gives root access on remote docker containers that expose their APIs

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

Invisible network protocol sniffer

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

Project dedicated to fight Layer 7 DDoS with proof of work, with an additional WAF and controller. Completed with full set of features and containerized for rapid and lightweight deployment.

Stealthy backdoor for Windows operating systems

Hawkeye filesystem analysis tool

A permutation generation tool written in golang

Open-source framework to detect outliers in Elasticsearch events

A workshop on Packet Crafting using Scapy.