Repository Index

Directory/File, DNS and VHost busting tool written in Go

• go
• pentesting
• tool
• dns

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

• powershell
• nishang
• security
• red-team

game of active directory

• active-directory
• infrastructure-as-code
• pentest
• ansible

You Know, For WEB Fuzzing !

• fuzzing
• fuzz-testing
• pentesting
• username

Direct Memory Access (DMA) Attack Software

The Network Execution Tool

• hacking
• pentest
• pentest-tool
• pentest-tools

Investigate malicious Windows logon by visualizing and analyzing Windows event log

• security
• dfir
• javascript
• visualization

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

• sleuthkit
• tct
• ntfs
• forensics

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

• enterprise-software
• saml
• saml2
• saml-service-provider

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam

ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.

• active-directory
• cloud-security
• defensive-validation
• fastapi

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

Typed TypeScript SDK for direct and managed social platform integrations, with capability checks, explicit outcomes, and deterministic testing.

• api-integration
• bluesky
• bun
• developer-tools

A concise, directive, specific, flexible, and free incident response plan template

• incident-response
• incident
• incident-management
• infosec

Local-first password manager with direct device-to-device sync

• password-manager
• totp-authenticator
• security
• security-tools

A tool for deploying and detecting use of Active Directory honeytokens

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles

Delphi basic library for validation and authentication of LDAP users in Active Directory.

• activedirectory
• delphi
• adsi
• ldap

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

• deceptive-webpages
• web-cloner
• honeypot
• deception