yowie
joda32/yowieFinds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
defensive-toolsdns-analysisdns-subdomain-enumeration+9
2
joda32/yowieFinds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
synacktiv/aadoutsider-pyPython3 rewrite of AsOutsider features of AADInternals
hainhc/cve-2026-73570Proof-of-concept exploit for CVE-2026-73570, an unauthenticated OS command injection in Zimbra Collaboration Suite via zimbra-snmp log injection,…
noxxi/p5-ssl-toolsPerl scripts for SSL/TLS analysis: check protocol and cipher support, verify certificates, test OCSP, and detect Heartbleed across SMTP, HTTPS, and…
all3xj/fixing-google-secops-detectionsTuning and refactoring Google Chronicle Curated Detections to eliminate alert fatigue and fix logic gaps/bugs.
falcosecurity/falcoReal-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…
domainaware/parsedmarcA Python package and CLI for parsing aggregate and forensic DMARC reports
mail-in-a-box/mailinaboxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
0x0allenace/soc-analyst-portfolioA curated portfolio showcasing my SOC investigations, threat hunting projects, DFIR labs, detection engineering, technical blogs, and cybersecurity…
aramosf/cve-2026-24031Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…
delivr-to/detectionsA home for detection content developed by the delivr.to team
h4cknain/cve-2024-21413-microsoft-outlook-moniker-link-vulnerabilityLab write-up analyzing CVE-2024-21413 Outlook Moniker Link exploitation, NetNTLMv2 credential leakage via SMB, detection with YARA/Wireshark, and…
logisek/azureadenumerationMicrosoft Entra ID (Azure AD) Unauthenticated Enumeration
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
bishopfox/spfmapA program to map out SPF and DKIM records for a large number of domains
bishopfox/spoofcheckselftestWeb application that lets you test if your domain is vulnerable to email spoofing
h3x0v3rl0rd/smtp_userenumPython script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.