DetectionLab
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
configuration-auditingdefensive-toolsdigital-forensics+5
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
safebuffer/vulnerable-adCreate a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
i-am-jakoby/powershell-for-hackersThis repository is a collection of powershell functions every hacker should know
t3l3machus/powershell-obfuscation-bibleA collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for…
curi0usjack/luckystrikeA PowerShell based utility for the creation of malicious Office macro documents.
securityjoes/masterparserMasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
r1cksec/cheatsheetsCollection of knowledge about information security
xbufu/adlabCustom PowerShell module to setup an Active Directory lab environment to practice penetration testing.
viralmaniar/phirauteeA proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell…
ice-wzl/hackneticsContained is all my reference material for my OSCP / Red Teaming. Designed to be a one stop shop for code, guides, command syntax, and high level…
1n3/powerexfilA collection of data exfiltration scripts for Red Team assessments.
osbornepro/btps-secpackPowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…
robomotic/invoke-antivmpowershell tool for VM evasion
themehackers/cve-2025-54100CVE-2025-54100 (CVSS 7.8 High) is a command injection vulnerability in the Invoke-WebRequest cmdlet of Windows PowerShell 5.1. It arises from…
shadowopcode/desckvb-ratFull analysis of a never documented before Remote Access Trojan linked to Pjoao1578 toolchain
manishrawat21/analysisHands-on analysis of common APT attack techniques, focused on how they show up in logs and how defenders can realistically detect them.
zedocun/soc-investigation-powershell-edrfreezeSOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…
