A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
☆40Jan 13, 2026Updated 8 months ago
Alternatives and similar repositories for awesome-attack-surface-management
Users that are interested in awesome-attack-surface-management are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Pentester Academy notes and commands from the CRTP/CRTE/PACES courses☆16Apr 29, 2022Updated 4 years ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- This repository contains a mindmap for different techniques for using Censys Search☆15Sep 17, 2025Updated last year
- VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs☆20Jan 13, 2026Updated 8 months ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆29Sep 9, 2026Updated last week
- ☆92Nov 16, 2018Updated 7 years ago
- Reproducible and extensible BloodHound playbooks☆43Jan 20, 2020Updated 6 years ago
- Protect your servers with a secret header☆28Jun 12, 2020Updated 6 years ago
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- Extract data from a .git directory.☆15Mar 28, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups …☆48Updated this week
- Pythonize Intruder Payload☆13Dec 15, 2020Updated 5 years ago
- Library of traffic redirectors☆25Apr 7, 2020Updated 6 years ago
- Browser extension for launching multi-platform OSINT queries from grouped YAML profiles.☆10Apr 25, 2025Updated last year
- Speak to your shell using various metaphors sourced from differing cultural dialects.☆15Jan 14, 2021Updated 5 years ago
- Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security te…☆42Sep 2, 2026Updated 2 weeks ago
- KeyTerms centralized terminology management tool☆13Feb 7, 2019Updated 7 years ago
- Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a…☆44Apr 13, 2026Updated 5 months ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆36Apr 30, 2020Updated 6 years ago
- ☆18Sep 14, 2023Updated 3 years ago
- Awesome hacking is an awesome collection of hacking tools.☆17Apr 24, 2019Updated 7 years ago
- AI-Powered Web Attack Surface Enumeration☆55Sep 4, 2026Updated 2 weeks ago
- Simple tmux session management.☆17Dec 16, 2023Updated 2 years ago
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 5 months ago
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 6 months ago
- PoC for extracting office files into PDF file metadata☆11Sep 11, 2019Updated 7 years ago
- Scripts to interact with Microsoft Graph APIs☆47Nov 7, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆27May 21, 2026Updated 3 months ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- Awesome Secure Coding☆19Feb 13, 2026Updated 7 months ago
- ☆32Dec 28, 2023Updated 2 years ago
- ☆18Mar 28, 2026Updated 5 months ago
- Bunch of honey related items that spoof/decoy powersploit functions.☆17Apr 23, 2020Updated 6 years ago
- Kerberoast Detection Script☆31Oct 31, 2024Updated last year