CanIPhish

open-security-training. Interactive web-based cybersecurity and privacy training modules with SCORM support. Deployable as standalone HTML or LMS-integrated content.

CanIBeSpoofed. CanIBeSpoofed is a console project utilising functionality built for the https://caniphish.com/free-phishing-tools/email-spoofing-test website. This project facilitates scanning of domains to gain visibility over email supply chain and SPF/DMARC vulnerabilities.

Phishious. An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.

LetsEncrypt. C# layer for generation of wildcard Let's Encrypt SSL certificates

caniphish_thirdparty_landing. Javascript and JQuery functions needed to import your own websites into CanIPhish for success tracking

spf-bypass. This project demonstrates SPF-bypass techniques utilised by phishers to abuse domains that haven't been secured by DMARC.

domains. World’s single largest Internet domains dataset

awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources

checkov-vscode. Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.

Nager.PublicSuffix. Parse and validate domain names using the Public Suffix List, splitting domains into subdomain, main part, and TLD for .NET applications.

espoofer. An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

DVWA. Damn Vulnerable Web Application (DVWA)

APAC-Conferences. A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.

Taken. Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.

phishing-frenzy-templates. Phishing Scenarios Used for Phishing Frenzy

o365-attack-toolkit. A toolkit to attack Office365

Sublist3r. Fast subdomains enumeration tool for penetration testers

Macro_Signing_Automation. Walkthrough of Microsofts Office Macro Signing Utility

olescan. A lightweight wrapper aggregating the functionality of several tools to scan and detect malicious contents embedded within MS OLE2 and MS Office documents

kubernetes. Production-Grade Container Scheduling and Management

pcodedmp. A VBA p-code disassembler

openmcdf. Microsoft Compound File .net component - pure C# - netstandard 2.0

EvilClippy. A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

TikiTorch. Process Injection

oletools. oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

awesome-threat-detection. ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

afl-training. Exercises to learn how to fuzz with American Fuzzy Lop