JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and

A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams.

While the world is still recovering, research hasn't slowed its frenetic pace, especially in the field of artificial intelligence. More, many important

Certipy is a Python tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS).

To install Medusa, you'll need Mythic installed on a remote computer. You can find installation instructions for Mythic at the Mythic project page.

Tracking deployment metrics for applications deployed to kubernetes.

Awesome AWS Amplify curates the best AWS Amplify, tools, tutorials, articles and more. PRs are welcome! Workshops Serverless GraphQL API with AppSync and

A curated list of blockchain security Wargames, Challenges, and Capture the Flag (CTF) competitions and solution writeups.

usql is a universal command-line interface for PostgreSQL, MySQL, Oracle Database, SQLite3, Microsoft SQL Server, and many other databases including NoSQL and

IRIS is a web collaborative platform for incident response analysts allowing to share investigations at a technical level.

Purple Teaming Attack & Hunt Lab - TerraForm

Check out our RPC Firewall blog post to gain better understanding of RPC, RPC attacks and the solution: the RPC Firewall. For any questions, issues,

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pentesting, malware analysis and security assessment

This document was designed to be a useful, informational asset for those looking to understand the specific tactics, techniques, and procedures (TTPs)