A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
☆39Jan 13, 2026Updated 7 months ago
Alternatives and similar repositories for awesome-attack-surface-management
Users that are interested in awesome-attack-surface-management are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Pentester Academy notes and commands from the CRTP/CRTE/PACES courses☆15Apr 29, 2022Updated 4 years ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆19Jul 2, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs☆20Jan 13, 2026Updated 7 months ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆29Updated this week
- This repository contains a mindmap for different techniques for using Censys Search☆15Sep 17, 2025Updated 11 months ago
- Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security te…☆39Updated this week
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆27May 21, 2026Updated 3 months ago
- Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups …☆48Updated this week
- Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a…☆44Apr 13, 2026Updated 4 months ago
- AI-Powered Web Attack Surface Enumeration☆50Feb 5, 2026Updated 6 months ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆93Nov 16, 2018Updated 7 years ago
- Reproducible and extensible BloodHound playbooks☆43Jan 20, 2020Updated 6 years ago
- A PowerShell module used to deploy deceptive Active Directory Certificate Services (ADCS) certificate templates, using targeted ACEs to a…☆15Mar 9, 2026Updated 5 months ago
- Protect your servers with a secret header☆28Jun 12, 2020Updated 6 years ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆18Jul 23, 2026Updated last month
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- Extract data from a .git directory.☆15Mar 28, 2023Updated 3 years ago
- Pythonize Intruder Payload☆13Dec 15, 2020Updated 5 years ago
- Library of traffic redirectors☆25Apr 7, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Browser extension for launching multi-platform OSINT queries from grouped YAML profiles.☆10Apr 25, 2025Updated last year
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 3 months ago
- A fast vulnerability scanner for package dependencies☆16Jul 22, 2026Updated last month
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- ☆36Apr 30, 2020Updated 6 years ago
- Stop getting 403 Forbidden. A specialized httpx-like toolkit for WAF evasion.☆21Jan 14, 2026Updated 7 months ago
- Stealth hybrid URL mapper☆31May 1, 2026Updated 3 months ago
- ☆24Apr 15, 2026Updated 4 months ago
- ☆18Sep 14, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 6 months ago
- Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.☆21May 13, 2026Updated 3 months ago
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆223Updated this week
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 4 months ago
- CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.☆20May 12, 2026Updated 3 months ago
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 5 months ago