siras
stuxend/sirasSecurity Incident Response Automated Simulations (SIRAS) are internal events that provide a structured opportunity to practice the incident response…
cloud-securityincident-responsepenetration-testing+1
stuxend/sirasSecurity Incident Response Automated Simulations (SIRAS) are internal events that provide a structured opportunity to practice the incident response…
wmal/linux-kodachiHardened Debian-based privacy OS with pre-integrated anonymity stack (Tor, VPN, DNSCrypt), anti-forensic tooling, SOC security center, and standalone…
adrecon/adreconPowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.
drew-alleman/datasurgeonQuickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
nowsecure/fsmonFilesystem monitor tool for Linux/Android iOS/macOS
mvt-project/androidqfandroidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of…
botherder/androidqfPortable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…
olafhartong/bamboozledrA comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
skelsec/adiskreader-secretsdumpExtract registry and NTDS secrets from local or remote disk images
adityaks/meleePython-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…
shellkraft/ledgerAn aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…
zerozenxlabs/cve-2025-61882-oracle-ebsOperational exploit for CVE-2025-61882 in Oracle E-Business Suite, with research artifacts for defensive validation, detection engineering, incident…
lightninglabs/chanleakcheckA tool to check if your lnd node was targeted by CVE-2019-12999
tc4dy/cve-2026-58048-poc-exploit👾 CVE-2026-58048 – cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 2 tools: Safe…
hainhc/cve-2026-73570Proof-of-concept exploit for CVE-2026-73570, an unauthenticated OS command injection in Zimbra Collaboration Suite via zimbra-snmp log injection,…
0xblackash/cve-2026-48907CVE-2026-48907
adityabhatt3010/cve-2025-53770-sharepoint-zero-day-variant-exploited-for-full-rceA critical zero-auth RCE vulnerability in SharePoint (CVE-2025-53770), now exploited in the wild, building directly on the spoofing flaw…
0xblackash/cve-2026-20253CVE-2026-20253