A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
☆37Jan 13, 2026Updated 6 months ago
Alternatives and similar repositories for awesome-attack-surface-management
Users that are interested in awesome-attack-surface-management are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆18Mar 19, 2023Updated 3 years ago
- Pentester Academy notes and commands from the CRTP/CRTE/PACES courses☆15Apr 29, 2022Updated 4 years ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆19Jul 2, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs☆20Jan 13, 2026Updated 6 months ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆27Jul 1, 2026Updated 2 weeks ago
- This repository contains a mindmap for different techniques for using Censys Search☆15Sep 17, 2025Updated 10 months ago
- Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security te…☆38Jun 26, 2026Updated 3 weeks ago
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆27May 21, 2026Updated last month
- Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups …☆48Updated this week
- Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a…☆42Apr 13, 2026Updated 3 months ago
- AI-Powered Web Attack Surface Enumeration☆44Feb 5, 2026Updated 5 months ago
- A PowerShell script to prevent Sysmon from writing its events☆17Apr 23, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆94Nov 16, 2018Updated 7 years ago
- Reproducible and extensible BloodHound playbooks☆44Jan 20, 2020Updated 6 years ago
- A PowerShell module used to deploy deceptive Active Directory Certificate Services (ADCS) certificate templates, using targeted ACEs to a…☆15Mar 9, 2026Updated 4 months ago
- Protect your servers with a secret header☆29Jun 12, 2020Updated 6 years ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆18Updated this week
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 2 months ago
- Extract data from a .git directory.☆15Mar 28, 2023Updated 3 years ago
- A fast vulnerability scanner for package dependencies☆15May 27, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Pythonize Intruder Payload☆13Dec 15, 2020Updated 5 years ago
- Library of traffic redirectors☆26Apr 7, 2020Updated 6 years ago
- Browser extension for launching multi-platform OSINT queries from grouped YAML profiles.☆10Apr 25, 2025Updated last year
- Stealth hybrid URL mapper☆17May 1, 2026Updated 2 months ago
- A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.☆35Apr 20, 2026Updated 3 months ago
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆29Feb 10, 2026Updated 5 months ago
- Stop getting 403 Forbidden. A specialized httpx-like toolkit for WAF evasion.☆21Jan 14, 2026Updated 6 months ago
- ☆24Apr 15, 2026Updated 3 months ago
- ☆37Apr 30, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- ☆18Sep 14, 2023Updated 2 years ago
- Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.☆21May 13, 2026Updated 2 months ago
- Simple tmux session management.☆16Dec 16, 2023Updated 2 years ago
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆190Updated this week
- CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.☆20May 12, 2026Updated 2 months ago
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆16Apr 12, 2026Updated 3 months ago