All Categories → Security → blueteam

Top 68 blueteam open source projects

Oblivion

Data leak checker & OSINT Tool

✭ 237

python gui security-tools data email opensource osint pentest cybersecurity password pyqt5 blueteam leak

Malwless

Test Blue Team detections without running any attack.

✭ 215

powershell hacktoberfest redteam dfir blueteam mitre-attack siem sysmon

Blue Team

Blue Team Scripts

✭ 190

shell linux security windows benchmark debian hardening blueteam

Cypheroth

Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.

✭ 179

shell cybersecurity redteam bash-script active-directory blueteam

Remote Desktop Caching

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.

✭ 171

python hacking penetration-testing redteam forensics blueteam

Smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️

✭ 168

go aws cloud security-tools penetration-testing infosec api-documentation blueteam

Slack Watchman

Monitoring your Slack workspaces for sensitive information

✭ 159

python monitoring tools slack infosec cybersecurity redteam red-team blueteam slack-api

Windows hardening

Windows Hardening settings and configurations

✭ 148

powershell security windows windows-10 audit registry hardening checklist blueteam

Logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

✭ 1,914

javascript python HTML Dockerfile CSS security visualization dfir active-directory blueteam event-log

Flerken

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

✭ 133

blueteam malware-detection

Gitlab Watchman

Monitoring GitLab for sensitive data shared publicly

✭ 127

python monitoring tools infosec cybersecurity gitlab redteam red-team blueteam

Falconfriday

Bi-weekly hunting queries

✭ 125

blueteam

Defaultcreds Cheat Sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

✭ 1,949

Jupyter Notebook python pentesting pentest infosec cheatsheet bugbounty cybersecurity blueteam exploit offensive-security default-password credentials-gathering

Macos Attack Dataset

JSON DataSet for macOS mapped to MITRE ATT&CK Tactics.

✭ 116

macos detection threat-hunting elastic blueteam mitre-attack

Lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

✭ 1,506

XSLT redteam dfir blueteam purpleteam lolbins lolscripts living-off-the-land

Deploy Deception

A PowerShell module to deploy active directory decoy objects.

✭ 109

powershell redteam blueteam activedirectory

Information Security Tasks

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

✭ 108

html pentesting osint malware-analysis redteam forensics incident-response compliance information-security blueteam steganography auditing

Malwarepersistencescripts

A collection of scripts I've written to help red and blue teams with malware persistence techniques.

✭ 103

powershell malware redteam persistence blueteam

Rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

✭ 1,352

go security analytics dns analysis logs scanning blueteam beacon threat

Threathunt

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

✭ 92

powershell dfir incident-response threat-hunting blueteam

Ultimateapplockerbypasslist

The goal of this repository is to document the most common techniques to bypass AppLocker.

✭ 1,186

powershell redteam bypass blueteam rules

Hacker ezines

A collection of electronic hacker magazines carefully curated over the years from multiple sources

✭ 72

exploit vulnerability redteam vulnerabilities owasp exploits hacker information-security blueteam

Snoop

Snoop — инструмент разведки на основе открытых данных (OSINT world)

✭ 886

python linux security windows scanner osint pentest infosec ctf redteam termux geolocation web-scraping ip geo blueteam

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

✭ 776

security pentest pentest-tool collection redteam poc study blueteam

Awesome Security Hardening

A collection of awesome security hardening guides, tools and other resources

✭ 630

security awesome-list security-tools infosec best-practices cybersecurity security-hardening blueteam

Theharvester

E-mails, subdomains and names Harvester - OSINT

✭ 6,175

python Dockerfile osint redteam reconnaissance recon information-gathering discovery blueteam emails subdomain-enumeration

Slackpirate

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

✭ 512

python slack redteam blueteam slack-api

Repo Supervisor

Scan your code for security misconfiguration, search for passwords and secrets. 🔍

✭ 482

javascript security serverless redteam secrets blueteam secret-management

Gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

✭ 6,030

HTML SCSS python TeX Makefile ruby emacs lisp linux unix redteam post-exploitation bypass reverse-shell blueteam binaries exfiltration bind-shell gtfobins

Plumhound

Bloodhound for Blue and Purple Teams

✭ 452

python infosec neo4j active-directory blueteam directory

Wadcoms.github.io

WADComs is an interactive cheat sheet, containing a curated list of Unix/Windows offensive tools and their respective commands.

✭ 431

html windows cheatsheet redteam exploitation persistence enumeration privilege-escalation blueteam

Blueshell

红蓝对抗跨平台远控工具

✭ 379

go shell pentest socks blueteam

Infosec reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Pidense

🍓📡🍍Monitor illegal wireless network activities. (Fake Access Points), (WiFi Threats: KARMA Attacks, WiFi Pineapple, Similar SSID, OPN Network Density etc.)

✭ 358

python monitoring wifi redteam fake blueteam wifi-security

Bxss

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

✭ 331

javascript security infosec bugbounty xss blueteam

Gray hat csharp code

This repository contains full code examples from the book Gray Hat C#

✭ 301

security dotnet automation pentesting xamarin redteam mono payload metasploit fuzzer sql-injection blueteam

Lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

✭ 3,810

XSLT redteam dfir blueteam purpleteam lolbins lolscripts living-off-the-land

ETWProcessMon2

ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

✭ 55

C#detection etw blueteam realtime-monitoring defenders remote-thread-injection processmonitoring tcpip-monitoring thread-monitor imageloads

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

✭ 854

microsoft activedirectory blueteam security-tools redteam

gtfo

Search for Unix binaries that can be exploited to bypass system security restrictions.

✭ 88

python linux reverse-shell binary post-exploitation bypass privilege-escalation exfiltration blueteam gtfo security-tools oscp redteam bind-shell gtfobins unix-binaries

RedTeam BlueTeam HW

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

✭ 466

Batchfile hw blueteam pentest-tool readteam

Opensource-Endpoint-Monitoring

This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.

✭ 30

python powershell XSLT Batchfile dfir sigma blueteam defcon26 sysmon-config endpoint-monitoring

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

✭ 844

go Makefile security phishing cybersecurity golang-tools blueteam security-tools honeypots goblin redteam redteam-tools

pyc2bytecode

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

✭ 70

python static-analysis reverse-engineering disassembler cybersecurity infosec malware-analysis malware-research blueteam security-tools threat-intelligence infosectools

Bootsy

Designed to be installed on a fresh install of raspbian on a raspberry pi, by combining Respounder (Responder detection) and Artillery (port and service spoofing) for network deception, this tool allows you to detect an attacker on the network quickly by weeding out general noisy alerts with only those that matter.

✭ 33

shell python infosec blueteam deception artillery responder-detection service-spoofing

TweetFeed

Collecting IOCs posted on Twitter

✭ 181

osint malware phishing malware-research phishing-attacks blueteam phishing-sites malware-detection phishing-detection

Crack-O-Matic

Find and notify users in your Active Directory with weak passwords

✭ 89

python HTML javascript CSS Jinja flask active-directory john-the-ripper hashcat blueteam cracking-hashes

BLUELAY

Searches online paste sites for certain search terms which can indicate a possible data breach.

✭ 24

python data-mining pastebin operations threat-hunting leak leaks breach leak-detection blueteam data-breach leak-prevention

GDPatrol

A Lambda-powered Security Orchestration framework for AWS GuardDuty

✭ 50

python aws cloud aws-lambda incident-response cybersecurity siem threatintel aws-security blueteam cloudsecurity soar aws-guardduty

BTPS-SecPack

This repository contains a collection of PowerShell tools that can be utilized to protect and defend an environment based on the recommendations of multiple cyber security researchers at Microsoft. These tools were created with a small to medium size enterprise environment in mind as smaller organizations do not always have the type of funding a…

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

✭ 3,715

C++security collection study hacking poc infosec ctf pentest markdown-article writeup blueteam ics-security security-tools pentest-tool redteam linux-learning post-penetration

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin?

✭ 862

go javascript HTML ldap active-directory acl activedirectory graph-theory infosec blueteam reconnaissance ad-audit acl-audit ldap-audit

ad-privileged-audit

Provides various Windows Server Active Directory (AD) security-focused reports.

✭ 42

powershell security auditing security-audit active-directory forensics dfir cybersecurity security-hardening account-management risk-assessment information-gathering blueteam security-tools system-hardening purpleteam reporting-tool security-auditing-tool

purple-team-exercise-framework

Purple Team Exercise Framework

✭ 284

blueteam redteam purpleteam ptef purpleteamexerciseframework adversaryemulation adversarysimulation

REW-sploit

Emulate and Dissect MSF and *other* attacks

✭ 115

python shell Dockerfile emulation malware-analysis defense metasploit blueteam cobaltstrike

ETWNetMonv3

ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

✭ 32