w8mej/PoorOperationalSecurityPractices

Stars
13
Rank 1,512,713 (Top 30 %)
Language
HTML
Created almost 7 years ago
Updated 12 months ago

w8mej/PoorOperationalSecurityPractices

w8mej

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Deceptive tradecraft should be fun and light, not stern and stressful. It is cool to be cute.

IRKnowledge

A curated list of tools for incident response

ThreatPlays

Sharing Threat Hunting runbooks

Threat_Modeling_Bank

A curated threat modeling library collection

Fuzzy

A faster version of AFL-Fuzz used for DARPA Cyber Grand Challenge with optimized scheduler code

CollabPentestFramework

GeoIP_OSINT

GeoBlockingCountries

Blocking countries at the IPv4 and IPv6 level

InfoSec-Blueprints

Essential playbooks & runbooks for cybersecurity operations. A dynamic resource for security pros to navigate digital threats, with best practices, incident management protocols, and community-driven updates. Elevate your security strategy and response with our AI-driven guides.

NotableIREvents

Global incident notes

gyoithon_dbautopwn

fork of gyoithon setup to be a script kiddies best friend

AFL_DataSets

A work in progress repository for curated and created AFL-enabled fuzzing datasets for various programs, protocols, and file formats.

cheatsheets

WAFRulesHeuristics

A curated repository for WAF signatures and heuristics

PublicSamplingPentestReports

RootKit_Understudy

A simple academic rootkit I use to mentor malware researchers

IncidentResponseMethods

easy to use operational incident best practices

PwnedPasswordCheck

Quick and dirty script to sanity check your password dumps against HaveIBeenPwned. Not Production ready but enough to sanity check.

ComplianceIsAByProductOfSecurity

attackdefense

FIR_Tooling

K8s_InfoSec

A simple walkthrough for those who wish to take their kubernetes knowledge to the next level by creating and deploying a hardened, simple kubernetes infrastructure

knocker

SimpleSalesFraud

Application_Security_SimpleInputValidation

CollectiveIntelligenceFramework_Configs

a collection of CIF configurations in use at customer sites

GitBackdoor

Simple repository to demonstrate inconsistent behaviors

cryptoCA_test

fizzbuzz

dockerfiles

Various docker files jess and I created

domxsswiki

Automatically exported from code.google.com/p/domxsswiki

ACLAttack

cloudsriseup.github.io

TLD

SecDevOps

VulnerabilityMetrics

Credentials

This repository contains my public keys & identities' configurations for secure operations, communication and digital signature verification. Use these for encrypted messaging or verifying my digital signatures. Sensitive data like private keys and valid credentials are not included & need to be changed prior to implementation for security reasons.

IntelMetrics

csrf-poc-template-by-js

Exported from code.google.com