Global Intelligence Search

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

In-depth attack surface mapping and asset discovery

brutespray Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

AiSOC Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

API-s-for-OSINT List of API's for gathering information about phone numbers, addresses, domains etc

Malcolm Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

awesome-cloud-security 🛡️ Awesome Cloud Security Resources ⚔️

Nidhogg Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

Conferences Conference presentation slides

attack-navigator Web app that provides basic navigation and annotation of ATT&CK matrices

Shuffle Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

awesome-intelligence A collaboratively curated list of awesome Open-Source Intelligence (OSINT) Resources