A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
☆43Jan 13, 2026Updated 8 months ago
Alternatives and similar repositories for awesome-attack-surface-management
Users that are interested in awesome-attack-surface-management are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 3 months ago
- This repository contains a mindmap for different techniques for using Censys Search☆15Sep 17, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for CVEs☆19Updated this week
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆29Sep 9, 2026Updated last month
- ☆92Nov 16, 2018Updated 7 years ago
- Reproducible and extensible BloodHound playbooks☆43Jan 20, 2020Updated 6 years ago
- Protect your servers with a secret header☆28Jun 12, 2020Updated 6 years ago
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- Extract data from a .git directory.☆15Mar 28, 2023Updated 3 years ago
- Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups …☆48Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Pythonize Intruder Payload☆13Dec 15, 2020Updated 5 years ago
- Library of traffic redirectors☆25Apr 7, 2020Updated 6 years ago
- Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security te…☆42Sep 2, 2026Updated last month
- Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a…☆44Apr 13, 2026Updated 5 months ago
- ☆36Apr 30, 2020Updated 6 years ago
- Awesome hacking is an awesome collection of hacking tools.☆17Apr 24, 2019Updated 7 years ago
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 5 months ago
- CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.☆20May 12, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 7 months ago
- PoC for extracting office files into PDF file metadata☆11Sep 11, 2019Updated 7 years ago
- Scripts to interact with Microsoft Graph APIs☆47Nov 7, 2024Updated last year
- ☆19Mar 7, 2019Updated 7 years ago
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆29May 21, 2026Updated 4 months ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- ☆32Dec 28, 2023Updated 2 years ago
- ☆18Mar 28, 2026Updated 6 months ago
- Bunch of honey related items that spoof/decoy powersploit functions.☆17Apr 23, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Kerberoast Detection Script☆31Oct 31, 2024Updated last year
- Pentest report writing guide☆20Apr 15, 2026Updated 5 months ago
- Living Off the Land Credentials. Public credential defaults, locations, and exposure patterns for real products, SaaS/cloud services, app…☆60Jul 19, 2026Updated 2 months ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Dec 5, 2025Updated 10 months ago
- Remote code execution in Power Platform connectors via JSON deserialization☆23Mar 30, 2023Updated 3 years ago
- Database interaction layer to store the Open Asset Model in a database management system☆29Apr 1, 2026Updated 6 months ago
- ☆24Sep 9, 2025Updated last year