Windows
sleepthegod/windowsCollection of offensive techniques for attacking Windows environments, with practical methods for exploitation, privilege escalation, and adversarial…
adversarial-attackexploitationpenetration-testing+3
99
sleepthegod/windowsCollection of offensive techniques for attacking Windows environments, with practical methods for exploitation, privilege escalation, and adversarial…
dafthack/cloudpentestcheatsheetsThis repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
threatlabz/iocsCurated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…
taleliyahu/threat_model_examplesA collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security…
quarkslab/conf-presentationsCurated collection of security conference talks, papers, and publications covering reverse engineering, cryptography, firmware analysis, and…
star-sg/presentationsCurated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…
bartblaze/yara-rulesCollection of private Yara rules.
ya551n3/bug-bounty-wordlistsCurated collection of wordlists for bug bounty hunting, covering directories, subdomains, parameters, usernames, passwords, and web fuzzing payloads.
bontchev/whodunitRecognizing the most likely APT groups responsible for an incident
nvisosecurity/cobaltwhispersCobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process injection,…
jhftss/pocA public collection of POCs & Exploits for the vulnerabilities I discovered
fastfire/ioc_attack_esxi_feb_2023Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023.
embee-research/sigmaA repository to release detection rules to the public
inquest/malware-samplesA collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net
inquest/yara-rules-vtCollection of YARA rules designed for usage through VirusTotal.com.
pe3zx/crowdstrike-falcon-queriesA collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
ignitetechnologies/mindmapThis repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give…