Dagobah is an open source tool written in python to automate the internal threat intelligence generation, inventory collection and compliance...
AWS Report is a tool for analyzing amazon resources.Install using PIPpip install awsreportFeaturesSearch IAM users based on creation dateSearch buckets...
Bastillion is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and...
Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more...
SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently,...
120 Vulnerabilities Patched in Microsoft's August 2020 Update Tuesday (2020-Aug Patch Tuesday)August 2020 brings along patches for 120 vulnerabilities within...
3. SkyArk includes more small sub-modules for playing around in the cloud security fieldAn example for such a sub-module is...
Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with...
Rapid7 is thrilled to be named a Leader in The Forrester Wave™: Midsize Managed Security Services Providers, Q3 2020! The...
Flask Session Cookie Decoder/EncoderDepencenciesPython 2 or Python 3itsdangerousFlaskInstallationBlackArch Linux# pacman -S flask-session-cookie-manager{3,2}GitArchLinuxBoth python3 etn python2:$ git clone https://github.com/noraj/flask-session-cookie-manager.git && cd...
Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessar y resources for APT repositories....
Throughout the first half of the year, we released updates and features to help security teams work more effectively and...
IRFuzz is a simple scanner with yara rules for document archives or any files.Install1. PrerequisitesLinux or OS XYara: just use...
Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a...
C# port of the Get-AppLockerPolicy PS cmdlet _____ _ ___ _ _/ ___| | / _ | | | |...
An extensible and freshly updated collection of phishingkits for forensics and future analysis topped with simple statsDisclaimerThis repository holds a...
FestIn is a tool for discovering open S3 Buckets starting from a domains.It perform a lot of test and collects...
Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python.Main FeaturesWrite your own PayloadsIn-Memory executionExtract Password ListDashboard...
This blog post is part 2 of a two-part blog series recapping Rapid7’s Black Hat debriefs as part of Virtual...
In June 2020, the online exam service ProctorU suffered a data breach which was subsequently shared extensively across online...
Introduction I've been tracking malicious Word documents from the TA551 (Shathak) campaign This year, we've seen a lot of Valak...
Yesterday, I found a new malicious Powershell script that deserved to be analyzed due to the way it was dropped...
A TCP tunneling suite built with golang and gRPC. gTunnel can manage multiple forward and reverse tunnels that are all...
TaoWu(檮杌) is a CobaltStrike toolkit. All the scripts are gathered on the Internet and slightly modified by myself. You can...
