Optiv Security (@optiv)
Guthub

optiv

Twitter logo Share LinkedIn logo Share Facebook logo Share

Top repositories

1

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.
Go
2,730
star
2

Freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
Go
1,405
star
3

Mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
Go
1,163
star
4

Ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.
Go
738
star
5

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
Rust
708
star
6

Go365

An Office365 User Attack Tool
Go
621
star
7

Talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
Go
431
star
8

mobile-nuclei-templates

390
star
9

Registry-Recon

Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon
321
star
10

Dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
Go
296
star
11

InsecureShop

An Intentionally designed Vulnerable Android Application built in Kotlin.
Kotlin
231
star
12

OSINT_Encyclopedia

Your go-to resource for all things OSINT
155
star
13

blemon

Universal BLE Monitoring with Frida (or Objection)
JavaScript
95
star
14

Microsoft365_devicePhish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
Python
92
star
15

rest-api-goat

Python
69
star
16

KnockKnock

Enumerate valid users within Microsoft Teams and OneDrive with clean output.
Python
56
star
17

rustyIron

rustyIron is a tool that takes advantage of functionality within Ivanti's MobileIron MDM solution to perform single-factor authentication attacks. rustyIron can locate the MobileIron MDM authentication endpoint, validate the authentication strategy of the environment, perform user enumeration, brute-force registration PIN values, and perform single-factor authentication attacks.
Go
43
star
18

airCross

airCross is a tool that takes advantage of API functionality within VMWare's AirWatch MDM solution to perform single-factor authentication attacks. airCross can locate AirWatch authentication endpoint, validate the authentication strategy of the environment, collect GroupID authentication values, conduct single-factor authentication, and perform user enumeration, in some instances.
Go
39
star
19

CVE-2020-15931

Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability
Go
25
star
20

nvdsearch

A National Vulnerability Database (NVD) API query tool
Go
17
star
21

doppelganger

Doppelgänger is firmware that runs on ESP32 devices that can be embedded within commercially available RFID readers with the intent of capturing access control card data while performing physical security assessments. Doppelgänger keeps the operator's ease of access, maintenance, and operational communications in mind.
C++
13
star
22

DATP_Queries

Microsoft Defender ATP Advanced Hunting Queries
10
star
23

Yara-Rules

YARA
9
star
24

netneedle

Network based steganography based control channels and chat.
C
8
star
25

showSSID

Python
7
star
26

Luhn-Calculator

A very simple Burp extension to make it easier to enumerate credit cards in the Intruder.
Python
6
star
27

burp-reset-a-tron

reset-a-tron Burp extension
Python
6
star
28

android-ndk-crackme

A simple NDK-based application on which to demonstrate some important attack strategies.
Java
5
star
29

burp-IBM-WebSphere-Portlet-Decoder

BurpSuite plugin for decoding IBM WebSphere Portlet States
Python
5
star
30

burp-java-deserializer

Java
4
star
31

warmap-go

CSS
4
star
32

VisualLockPickingWorkstation

The Visual Lock Picking Workstation is a Raspberry Pi enclosure which makes it possible to capture live video from a cutaway lock. It is intended as an instructional device which can be used to display the inner workings of a lock while teaching lock picking.
4
star
33

burpshellshock

Shellshock scanner for Apache MOD_CGI
Java
3
star
34

azure_runbooks

2
star
35

talus_client

Python
2
star
36

pyautoaws

Simple Python wrapper for Terraform/Ansible to build AWS resources
HCL
2
star
37

checkpassword-.net

HIBP Pwned Passwords API Client for .NET apps
C#
2
star
38

talus

Python
2
star
39

Lightning-Action-Editor

Java
1
star
40

azure-api-management-tracing-helper

Java
1
star
41

captcha-solve

Python
1
star
42

checkpassword-java

HIBP Pwned Passwords API client for Java projects
Java
1
star
43

terraform-eks

Terraform/Amazon EKS Deployment Starter Scripts
HCL
1
star