op7ic/amphunt

Stars
14
Rank 1,438,076 (Top 29 %)
Language
Python
License
MIT License
Created over 4 years ago
Updated about 2 years ago

op7ic/amphunt

op7ic

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Cisco AMP threat hunting scripts

EDR-Testing-Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

BlueTeam.Lab

Blue Team detection lab created with Terraform and Ansible in Azure.

RT-CyberShield

Protecting Red Team infrastructure with cyber shield blocking AWS/AZURE/IBM/Digital Ocean/TOR/AV IP/ETC. ranges

Cloud-Investigate

A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.

shadowbroker-smb-scanner

shadowbroker SMB exploit scanner. Scans for ETERNALSYNERGY ETERNALBLUE ETERNALROMANCE ETHERNALCHAMPION

LeakGenerator

Generate your own personal data leak

unix_collector

unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

GeoIPPlotter

GeoIP plotting script written in Python to help security teams draw visualized reports from IP addresses

OS.LAB

Operating System testbed created with Terraform to test payloads, programs and compatibility on different OS versions. Supports AWS and Azure.

defcon-23-slides-only

investigatehunt

Cisco Umbrella Investigate threat hunting scripts

wordpress-password-bruteforcer

simple module which will attempt to bruteforce wordpress passwords for either specific username or specific list of users and passwords.

powershell-reverse-shell

Simple Powershell Reverse Shell with handling server in python

WINFINGER

A collection of Windows hashes generated against windows installation ISOs using sigcheck from Sysinternals

Bad-Firewall

Bad IP blocking firewall with ipset, iptables and a dash of bash.

car-hacking-materials

various references and docs related to car hacking

windows-driver-privesc

Check windows drivers for weak permission which could lead to privilage escalation.

LokiToWinEventLog

A repository containing scripts which allow Loki to log to Windows Event Log.

DNS-Testing-Script

Test the accuracy of DNS monitoring and blocking solution.

RT-OfficeBeaconBox

Simple Office-based beacon that calls back to your server for phishing exercises.

Yara-Mixer

PowerShell scripts concatenating different Yara rules into one master rule file.

Pe-SieveToWinEventLog

A repository containing scripts which allow pe-sieve to log to Windows Event Log.

local-mysql-bruteforcer

local mysql password bruteforcer

fake-http-auth-generator

amp-policy-kit

Cisco Secure Endpoint policy assessment kit

meraki-hunting

Threat hunting scripts for Cisco Meraki installations

SHARPPENCIL

A PowerShell and C# implementation of LDAP attribute extraction for domain users

Invoke-DomainHasher

A threat hunting tool designed to help in identifying unknown binaries across windows domain.

massJARM

A threaded implemenation of JARM tool

afl-fuzz-packets

AFL-minimized packet samples for fuzzing

universal-process-privesc

This simple script is a basic wrapper around windows API to elevate current process privilage. Handy for developement and common functions in python.

evtxpickup

Windows AD wide windows event collection script for scaled up forensic investigations.

MCuban_Blog

Mark Cuban blog copy (in PDF)

Codeword-Generator-Collection

Codeword generators written in common programming and scripting languages