A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
☆45Jan 13, 2026Updated 9 months ago
Alternatives and similar repositories for awesome-attack-surface-management
Users that are interested in awesome-attack-surface-management are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Post-Exploitation EVTX Analyzer for BloodHound Mapping☆15May 8, 2026Updated 5 months ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 3 months ago
- Pentester Academy notes and commands from the CRTP/CRTE/PACES courses☆16Apr 29, 2022Updated 4 years ago
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated last month
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆26Oct 8, 2026Updated 3 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 15k CVEs☆23Updated this week
- Pentesting, Red Teaming. Reports☆11May 25, 2023Updated 3 years ago
- A fast, native desktop workbench for Azure Data Explorer☆13Updated this week
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆29Sep 9, 2026Updated last month
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Speak to your shell using various metaphors sourced from differing cultural dialects.☆15Jan 14, 2021Updated 5 years ago
- KeyTerms centralized terminology management tool☆12Feb 7, 2019Updated 7 years ago
- Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups …☆50Updated this week
- Indicators of Compromise & Attack (IoC/IoA) of InfoSec Security Investigations & Researches.☆12May 11, 2025Updated last year
- Misc. Public Reports of Penetration Testing and Security Audits.☆37Jan 8, 2021Updated 5 years ago
- Sample list of penetration test reports☆17Dec 12, 2016Updated 9 years ago
- ☆92Nov 16, 2018Updated 7 years ago
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated last month
- ☆15Sep 19, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.☆20May 12, 2026Updated 5 months ago
- Study trackers, Obsidian prep vaults, practice boxes and resources for Hack The Box certs: CJCA, CPTS, CWES, CDSA, CWEE, CAPE, CWPE, COAE…☆36Updated this week
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆24Aug 20, 2026Updated 2 months ago
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆29May 21, 2026Updated 5 months ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Sep 27, 2026Updated last month
- Awesome Secure Coding☆19Updated this week
- Database interaction layer to store the Open Asset Model in a database management system☆29Updated this week
- Writ: An AI agent skill that catches AI writing tells and clichés using a self-edit checklist drawn from Wikipedia's Signs of AI Writing …☆26Updated this week
- EAA is a curated catalog of techniques and real-world cases involving abuse of local AI agents through their runtime, configuration, stat…☆94Oct 3, 2026Updated 3 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆12Jun 21, 2014Updated 12 years ago
- Simple Automation script for juniper cve-2023-36845☆19Jan 30, 2024Updated 2 years ago
- ☆11Jan 12, 2023Updated 3 years ago
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆39Oct 14, 2026Updated 2 weeks ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Oct 19, 2026Updated last week
- Takes raw hex shellcode (e.g. msfvenom hex format) from a cmd line arg, text file, or URL download and runs it.☆19Dec 17, 2018Updated 7 years ago
- Passivedns monitor implementation in Rust.☆12Apr 21, 2016Updated 10 years ago