🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
☆88Apr 20, 2025Updated last year
Alternatives and similar repositories for esxi-testing-toolkit
Users that are interested in esxi-testing-toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An introduction to detection engineering☆14Jan 3, 2025Updated last year
- A few BOF files to help facilitate reading and writing bytes to DLL function calls.☆12Jun 16, 2025Updated last year
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆158Jul 25, 2026Updated 3 months ago
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- ShellSweeping the evil.☆185Jul 22, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆475Feb 18, 2026Updated 8 months ago
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Oct 18, 2026Updated last week
- ESXi Cyber Security Incident Response Script☆29Sep 4, 2024Updated 2 years ago
- ACL Viewer for Windows☆133May 4, 2025Updated last year
- Automation tool for Windows Deception Host Burn-In☆85Dec 4, 2024Updated last year
- ☆21Mar 26, 2026Updated 7 months ago
- Cyber threat intelligence tool suite.☆41Apr 3, 2025Updated last year
- Volatility Dockerfile☆31Oct 3, 2022Updated 4 years ago
- Decrypt SCCM and DPAPI secrets with Powershell.☆45Jun 24, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- Repo that hold write-ups of various research projects I did and/or overall InfoSec things I investigated/researched.☆22Jan 5, 2025Updated last year
- SharpShareFinder is a minimalistic network share discovery POC designed to enumerate shares in Windows Active Directory networks leveragi…☆36Jul 10, 2024Updated 2 years ago
- ☆122May 26, 2025Updated last year
- KQL Queries. Microsoft Defender, Microsoft Sentinel☆934Updated this week
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆17Apr 22, 2026Updated 6 months ago
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆16Oct 23, 2026Updated last week
- Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data☆431Oct 23, 2026Updated last week
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Stupid Simple Detection Testing☆13Mar 7, 2024Updated 2 years ago
- Windows Session Hijacking via COM☆351Dec 13, 2025Updated 10 months ago
- A repository to store community malware research notes and findings.☆17Oct 18, 2026Updated last week
- This repo is about Active Directory Advanced Threat Hunting☆653Feb 17, 2025Updated last year
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆38Sep 28, 2025Updated last year
- Abusing Azure services over C2☆384Jan 20, 2026Updated 9 months ago
- Utilities for Pentesting with BloodHound☆22Oct 14, 2026Updated 2 weeks ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆49Nov 17, 2025Updated 11 months ago
- A security assessment tool for analyzing Active Directory Group Policy Objects (GPOs) to identify misconfigurations and vulnerabilities☆333Mar 27, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆16May 3, 2024Updated 2 years ago
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆845May 16, 2026Updated 5 months ago
- Conceptual Methods for Finding Commonalities in Macho Files☆13Mar 21, 2024Updated 2 years ago
- LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.☆55Aug 24, 2026Updated 2 months ago
- Request device ticket/token using the device's MSA☆38Aug 25, 2025Updated last year
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆207Mar 6, 2025Updated last year