Optiv Security (@optiv)
Guthub

optiv

Twitter logo Share LinkedIn logo Share Facebook logo Share

Top repositories

1

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.
Go
2,665
star
2

Freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
Go
1,379
star
3

Mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
Go
1,129
star
4

Ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.
Go
729
star
5

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
Rust
700
star
6

Go365

An Office365 User Attack Tool
Go
604
star
7

Talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
Go
428
star
8

mobile-nuclei-templates

352
star
9

Registry-Recon

Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon
317
star
10

Dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
Go
294
star
11

InsecureShop

An Intentionally designed Vulnerable Android Application built in Kotlin.
Kotlin
224
star
12

OSINT_Encyclopedia

Your go-to resource for all things OSINT
150
star
13

Microsoft365_devicePhish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
Python
89
star
14

blemon

Universal BLE Monitoring with Frida (or Objection)
JavaScript
85
star
15

rest-api-goat

Python
62
star
16

KnockKnock

Enumerate valid users within Microsoft Teams and OneDrive with clean output.
Python
58
star
17

rustyIron

rustyIron is a tool that takes advantage of functionality within Ivanti's MobileIron MDM solution to perform single-factor authentication attacks. rustyIron can locate the MobileIron MDM authentication endpoint, validate the authentication strategy of the environment, perform user enumeration, brute-force registration PIN values, and perform single-factor authentication attacks.
Go
45
star
18

airCross

airCross is a tool that takes advantage of API functionality within VMWare's AirWatch MDM solution to perform single-factor authentication attacks. airCross can locate AirWatch authentication endpoint, validate the authentication strategy of the environment, collect GroupID authentication values, conduct single-factor authentication, and perform user enumeration, in some instances.
Go
40
star
19

CVE-2020-15931

Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability
Go
25
star
20

nvdsearch

A National Vulnerability Database (NVD) API query tool
Go
16
star
21

doppelganger

Doppelgänger is firmware that runs on ESP32 devices that can be embedded within commercially available RFID readers with the intent of capturing access control card data while performing physical security assessments. Doppelgänger keeps the operator's ease of access, maintenance, and operational communications in mind.
C++
13
star
22

DATP_Queries

Microsoft Defender ATP Advanced Hunting Queries
11
star
23

Yara-Rules

YARA
10
star
24

netneedle

Network based steganography based control channels and chat.
C
10
star
25

showSSID

Python
9
star
26

Luhn-Calculator

A very simple Burp extension to make it easier to enumerate credit cards in the Intruder.
Python
7
star
27

burp-reset-a-tron

reset-a-tron Burp extension
Python
7
star
28

burp-IBM-WebSphere-Portlet-Decoder

BurpSuite plugin for decoding IBM WebSphere Portlet States
Python
6
star
29

burp-java-deserializer

Java
5
star
30

android-ndk-crackme

A simple NDK-based application on which to demonstrate some important attack strategies.
Java
5
star
31

warmap-go

CSS
5
star
32

VisualLockPickingWorkstation

The Visual Lock Picking Workstation is a Raspberry Pi enclosure which makes it possible to capture live video from a cutaway lock. It is intended as an instructional device which can be used to display the inner workings of a lock while teaching lock picking.
5
star
33

burpshellshock

Shellshock scanner for Apache MOD_CGI
Java
4
star
34

talus

Python
4
star
35

azure_runbooks

3
star
36

talus_client

Python
3
star
37

checkpassword-.net

HIBP Pwned Passwords API Client for .NET apps
C#
3
star
38

checkpassword-java

HIBP Pwned Passwords API client for Java projects
Java
3
star
39

Lightning-Action-Editor

Java
2
star
40

pyautoaws

Simple Python wrapper for Terraform/Ansible to build AWS resources
HCL
2
star
41

azure-api-management-tracing-helper

Java
2
star
42

captcha-solve

Python
2
star
43

terraform-eks

Terraform/Amazon EKS Deployment Starter Scripts
HCL
1
star