README.md

Github-Feed

ARCHIVED Please check out https://github.com/micahjmartin/Aperture instead for all the repos that I like

Repositories that I have found and liked, There was too many in my stars

OSINT

• Framework - https://github.com/lockfale/OSINT-Framework
• Maltego Transforms - https://github.com/michenriksen/maltego
• Domain Enumeration - https://github.com/michenriksen/aquatone
• Find Pictures Based on Location - https://github.com/coldfusion39/geOSINT
• Find Social Media Pictures - https://github.com/ilektrojohn/creepy
• Follow emails - https://github.com/SharadKumar97/OSINT-SPY
• Scrape Twitter without an API - https://github.com/haccer/twint
• Linked In - https://github.com/0x09AL/raven
• OSInt Lists - https://github.com/IVMachiavelli/OSINT_Team_Links
• Mass OSINT list - https://github.com/jivoi/awesome-osint
• Github Secrets finder - https://github.com/dxa4481/truffleHog
• Github recon - https://github.com/michenriksen/gitrob
• Find profiles based on image and name - https://github.com/ThoughtfulDev/EagleEye
• Non-api Linked in scraper - https://github.com/dchrastil/ScrapedIn
• Find usernames based on Namecheck - https://github.com/HA71/Namechk
• OSINT scraping framework - https://github.com/xillwillx/skiptracer
• Wayback Scraper - https://github.com/jsvine/waybackpack

Linux Advanced Tools

• Python DNS C2/Beacon - https://github.com/facebookincubator/WEASEL

• Pop the kernel - https://github.com/spencerdodd/kernelpop

• Process Injection - https://github.com/gaffe23/linux-inject

• More Process Injection? - https://github.com/SoldierX/libhijack

• More Process injection - https://github.com/GDSSecurity/Cexigua

• Share the console - https://github.com/0xffffe001/teleconsole

• Share the console again - https://github.com/nopernik/SSHPry2.0

• Pfsense Malware - https://github.com/joe-graham/dad-and-son

• Shellcode inject - https://github.com/Srakai/Adun

• Modify ELF files - https://github.com/schieb/ELFManip

• Modify ELF files - https://github.com/mfaerevaag/elfinjector

• Modify ELF files - https://github.com/zznop/drow

• Monitor Executed Commands - https://github.com/itsKindred/procSpy

• Reverse SSH Implant - https://github.com/dsnezhkov/SSHoRTy

Linux Small Tools

• PHP shell - https://github.com/mempodippy/snodew
• Fake sudo - https://github.com/xorond/sudo-snooper
• Steal SSH Passwords, Better mimipenguin - https://github.com/blendin/3snake
• Steal SSH Passwords - https://github.com/mthbernardes/sshLooter
• Steal passwords from memory - https://github.com/huntergregal/mimipenguin
• Steal root passwords from sudo - https://github.com/CoolerVoid/rootstealer
• Reverse SSH command execution - https://github.com/feexd/vbg
• Linux Exploit Suggester 2 - https://github.com/jondonas/linux-exploit-suggester-2
• Perstience Binaries - https://github.com/GTFOBins/GTFOBins.github.io
• Pam Backdoor - https://github.com/jrozner/poovey/tree/master/module
• Load ELF into memory - https://github.com/rek7/fireELF
• Run ELF from memory - https://github.com/guitmz/memrun
• Sudo Misconfiguration detector - https://github.com/TH3xACE/SUDO_KILLER
• SSH Backdoor Generator - https://github.com/nccgroup/SSHession
• Linux PostExp Framework - https://github.com/zMarch/Orc

Linux Rootkits

• WIP 4.x rootkit - https://github.com/QuokkaLight/rkduck
• Sample rootkit - https://github.com/PinkP4nther/Sutekh
• GPU rootkit example - https://github.com/gen0cide/jellyfish
• Containerizing Rootkit - https://github.com/r00tkillah/HORSEPILL

Linux Random Scripts

• privesc/postexp - https://github.com/darkerego/0hw3ll
• privesc/postexp - https://github.com/rebootuser/LinEnum

Linux Defensive

• Change detection - https://github.com/anvilventures/dawgmon
• Blue team scripts (might not be good) - https://github.com/maldevel/blue-team
• Kernel Mode Iptables - https://github.com/CoolerVoid/HiddenWall

Windows Offensive

• Edge/IE Callbacks - https://github.com/Arno0x/WSC2
• ICMP Reverse Shell - https://github.com/inquisb/icmpsh
• Python lib for hacking - https://github.com/SirFroweey/hackManager
• VBS Reverse Shell - https://github.com/cym13/vbs-reverse-shell
• Injection - https://github.com/Cybellum/DoubleAgent
• Auto domain PWN - https://github.com/byt3bl33d3r/DeathStar
• https://github.com/Mr-Un1k0d3r/ClickOnceGenerator
• Dropper Creation - https://github.com/D4Vinci/Dr0p1t-Framework
• WMI Provider - https://github.com/0xbadjuju/WheresMyImplant
• Elevaion - https://github.com/phroxvs/SysmonElevator
• Random PS - https://github.com/Kevin-Robertson/Powermad
• Find Executables for DLL Hijacking - https://github.com/MojtabaTajik/Robber
• Python mimikatz - https://github.com/skelsec/pypykatz
• Automate Bloodhound attack paths - https://github.com/GoFetchAD/GoFetch
• Bloodhound attacking - https://github.com/porterhau5/BloodHound-Owned
• Mini VNC server for redteam - https://github.com/rsmudge/vncdll
• NTLM web attacks - https://github.com/grutz/squirtle
• Elevate windows tokens - https://github.com/0xbadjuju/Tokenvator
• File Search Tool - https://github.com/vivami/SauronEye
• Generate Stealthy Malicious Links - https://github.com/xillwillx/tricky.lnk
• Kernel Implant - https://github.com/eLoopWoo/zwhawk
• Steal Word Document Contents - https://github.com/danielwolfmann/Invoke-WordThief
• Ring 3 Rootkit - https://github.com/bytecode77/r77-rootkit
• RDP in Golang - https://github.com/icodeface/grdp

Windows Defensive

• TCP Monitoring - https://github.com/R-Smith/tcpTrigger
• CSC Monitoring - https://github.com/glinares/CSCGuard
• Dump in-memory code modifications - https://github.com/hasherezade/pe-sieve
• Automate Virus/Cleanup tasks - https://github.com/bmrf/tron
• Find WMI persistence - https://github.com/darkquasar/WMI_Persistence
• Harden Windows - https://github.com/securitywithoutborders/hardentools
• PE file analysis - https://github.com/merces/pev

General Red team

• Shell Oneliner Generation - https://github.com/operatorequals/oneliner-sh
• Better version of ^^ - https://github.com/0x00-0x00/ShellPop
• Sniff Traffic - https://github.com/DanMcInerney/net-creds
• Get Passwords - https://github.com/AlessandroZ/LaZagne
• MITM DNS - https://github.com/LeonardoNve/dns2proxy
• Strip SSL - https://github.com/LeonardoNve/sslstrip2
• C2 Concept using a broswer - https://github.com/Arno0x/WSC2
• Go Ransomware - https://github.com/redpois0n/cry
• Secrets collector in Go - https://github.com/ahhh/GoRedLoot
• Gscript Examples - https://github.com/ahhh/gscripts

Infrastructure Tools

• Automatic Infrastructure - https://github.com/obscuritylabs/RAI
• Auto Install Pentest Tools - https://github.com/trustedsec/ptf
• Infrastructure Management Tool - https://github.com/evait-security/envizon
• Redteam Domain Tracking - https://github.com/GhostManager/Shepherd
• Automattic SIEM deployment for RT - https://github.com/SecurityRiskAdvisors/RedTeamSIEM
• RT Infra. Setup and Notes - https://github.com/ztgrace/red_team_telemetry
• Dynamic DNS Rebinding server - https://github.com/brannondorsey/whonow
• File Hosting server - https://github.com/kgretzky/pwndrop

Mobile

• Android Security List - https://github.com/jdonsec/AllThingsAndroid
• Android dynamic analysis - https://github.com/pjlantz/droidbox
• Android dynamic analysis - https://github.com/ac-pm/Inspeckage
• Frida Frontend for android - https://github.com/nccgroup/house
• List of mobile tools - https://github.com/ashishb/android-security-awesome
• Security assessment tool - https://github.com/mwrlabs/drozer
• Android unpacker - https://github.com/strazzere/android-unpacker
• Android app analysis - https://github.com/ernw/AndroTickler
• Reverse APK's - https://github.com/1N3/ReverseAPK
• Reverse protobuf from APK - https://github.com/marin-m/pbtk
• Reverse APK - https://github.com/xtiankisutsa/MARA_Framework

Frameworks

• Router Exploitation - https://github.com/threat9/routersploit
• Router Exploitation - https://github.com/DaniLabs/rexploit
• Printer Exploitation - https://github.com/RUB-NDS/PRET
• Wireless Pentesting Framework - https://github.com/Tylous/SniffAir
• WebApp pentesting Framework - https://github.com/owtf/owtf
• MITM Framwork - https://github.com/byt3bl33d3r/MITMf
• Wireless Auditing Framework - https://github.com/v1s1t0r1sh3r3/airgeddon
• PCAP Dissection Framework - https://github.com/USArmyResearchLab/Dshell

Knowledge

• General Knowledge - https://github.com/lanjelot/kb
• Git, random - https://github.com/badania/scriptz
• Random stuff - https://github.com/huntergregal/tools
• Redteam Infrastructure - https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki
• Threat Hunting Guide - https://github.com/A3sal0n/CyberThreatHunting
• Generic Signatures - https://github.com/Neo23x0/sigma
• Threat hunting - https://github.com/MatthewDemaske/ThreatHuntingStuff
• Golang Tutorial - https://github.com/parsiya/Hacking-with-Go
• Web App Hacking "Class" - https://github.com/Hacker0x01/hacker101
• x86 and Shellcode Tutorials - https://github.com/Kan1shka9/x86-Assembly-Language-and-Shellcoding-on-Linux
• OSCP Notes and Help - https://github.com/ferreirasc/oscp
• Massive Repository of scripts for pentesting - https://github.com/maldevel/PenTestKit

Boot Load Games

• Invaders - https://github.com/nanochess/Invaders

Lists

• https://github.com/coreb1t/awesome-pentest-cheat-sheets
• List of Lists - https://github.com/danielmiessler/SecLists
• Rootkit List - https://github.com/FingerLeakers/RootKits-List-Download
• Blackhat Tools - https://github.com/toolswatch/blackhat-arsenal-tools
• Red team tools - https://github.com/infosecn1nja/Red-Teaming-Toolkit
• Hacking tools - https://github.com/EgeBalci/Mass-Hacker-Arsenal
• More tools - https://github.com/yeyintminthuhtut/Awesome-Red-Teaming
• Wargames - https://github.com/zardus/wargame-nexus
• Massive tutorial list of how to build stuff - https://github.com/danistefanovic/build-your-own-x
• AWS Hacking Tool - https://github.com/carnal0wnage/weirdAAL
• Random PDFs - https://github.com/jivoi/offsec_pdfs

Pentesting

• Scraper, Scanner, Info gatherer - https://github.com/Tuhinshubhra/RED_HAWK

Reverse Engineering

• Auto disassembler - https://github.com/isislab/dispatch

Network Defense

• DNS Sniffer and Logger - https://github.com/droberson/greylost
• Traffic Monitoring System - https://github.com/stamparm/maltrail

HAM Radio

• Broadband-Hamnet utilities - https://github.com/argilo/bbhn-utils
• Virtual TNC - https://github.com/wb2osz/direwolf
• Anonymous radio chat - https://github.com/lulzlabs/AirChat
• Low Band Chatting - https://bitbucket.org/widefido/js8call/src/js8call/
• Tempest over SDR - https://github.com/martinmarinov/TempestSDR

Modern Command Line Tools

• Better Strings - https://github.com/glmcdona/strings2
• JSON Commandline query tool - https://github.com/tidwall/jj
• Make JSON Grepable - https://github.com/tomnomnom/gron
• Deofuscated strings - https://github.com/fireeye/flare-floss
• Protobuf decoder - https://github.com/mildsunrise/protobuf-inspector
• JSON Incremental digger - https://github.com/simeji/jid
• curl save to sqlite - https://github.com/schollz/squirrel

Random

• Pentest Vuln Scanner - https://github.com/1N3/Sn1per
• MSF knockoff - https://github.com/spencerdodd/pysploit
• Obfuscate IP addresses - https://github.com/D4Vinci/Cuteit
• Wordlist Generator - https://github.com/D4Vinci/elpscrk
• Regional Wordlist Generator - https://github.com/skahwah/wordsmith
• Password Cracking Rule - https://github.com/NotSoSecure/password_cracking_rules
• Auto Crack Responder Hashes - https://github.com/praetorian-inc/gladius
• Scrape already cracked hashes - https://github.com/UltimateHackers/Hash-Buster
• Gmail C2 - https://github.com/byt3bl33d3r/gcat
• Make Honeypots seem realistic - https://github.com/0x4D31/honeybits
• Callback through various types (Add gawk, ex. to this) - https://github.com/0x00-0x00/Shellkiller/
• C2 Via FireFox Send - https://github.com/dsnezhkov/foxtrot
• Inject Code into Chrome Extensions - https://github.com/6IX7ine/cromos
• SSL Validation and Error Checking Tool - https://github.com/CiscoCXSecurity/sslxray