Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Security automation content in SCAP, Bash, Ansible, and other formats

Hardening Ubuntu. Systemd edition.

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

My Privacy DNS #Matrix lists for blacklisting

Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessary resources for APT repositories.

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Information Security in Cybersecurity.

👽 The collection of awesome software, tools, libraries, documents, books, resources and cool stuff about information security, penetration testing and offensive cybersecurity.

Tor VPN

Network Forensic & Anomaly Detection System; tailored for covert channel/network steganography detection

Run TOR conveniently from a multi-platform docker container.

A quick script to install google on linux

An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk

This tool serves to add the kali linux repository to the ubuntu repository instantly. So that ubuntu users can install some of the tools that exist on kali linux.

Cross-Site Scripting (XSS) is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. The xss finder gets a link from the user and scan the website for XSS vulnerability by injecting malicious scripts at the input place.

Scripts to aid intrusion and malware detection using the Jamf Agent and Jamf Server

An introductory lab to automotive security.

This is a compilation of some scripts I've written to assist pen-testers and red-teamers. it takes out the need to memorize syntaxes of most commonly used one-liners in Kali Linux. I'll be updating the repo and making improvements overtime, Happy hacking everyone!

P0lyn0m1c0n builds compact, high-relevance password wordlists by mutating a target (a company name, a domain) into the patterns humans actually use — year suffixes, month names, leet substitutions, corporate vocabulary and common endings.