surface-watch monitors the authorized external attack surface of an organization over time
☆55May 11, 2026Updated 4 months ago
Alternatives and similar repositories for surface-watch
Users that are interested in surface-watch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆35Oct 30, 2025Updated 11 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 3 months ago
- Run BloodHound CE in a single-user setup with podman☆38Nov 12, 2025Updated 10 months ago
- ☆12Dec 23, 2021Updated 4 years ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Feb 26, 2026Updated 7 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆123Aug 19, 2026Updated last month
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Scripts to check for security issues with SSH keys and authorized_keys files on Linux and other Unix-like operating systems.☆25Sep 29, 2025Updated last year
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆64Updated this week
- Creating attacks paths across management and data planes☆66Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A CLI utility to scan S3 buckets permissions☆14May 14, 2023Updated 3 years ago
- ☆80May 8, 2026Updated 4 months ago
- Code canaries to quickly triage hallucinated ('slop') vulnerability reports☆100May 20, 2026Updated 4 months ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- The MAGIC tool is a wrapper around the Microsoft Graph Python SDK, designed to download incident response-relevant data from M365 environ…☆35Apr 13, 2026Updated 5 months ago
- OPSEC safe Kerberoasting in C#☆199Jun 14, 2022Updated 4 years ago
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated 2 years ago
- SigmaHQ pySigma CrowdStrike processing pipeline☆35Sep 26, 2026Updated last week
- a list of useful feeds☆100May 15, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing preci…☆50Sep 20, 2026Updated 2 weeks ago
- Public repository of Sigma and YARA rules created by Synacktiv☆21Oct 15, 2025Updated 11 months ago
- All kinds of tiny shells☆65Feb 3, 2023Updated 3 years ago
- For testing or trolling LLM based pentesting frameworks.☆20Feb 18, 2026Updated 7 months ago
- ☆19Oct 1, 2025Updated last year
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 7 months ago
- ☆28Mar 14, 2026Updated 6 months ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆19Sep 24, 2026Updated last week
- Run TTPs, with AI!☆142Feb 23, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Linux Persistence Detection, Hunting and Artifact Collection script☆26Jul 20, 2026Updated 2 months ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- ☆26Feb 18, 2025Updated last year
- Pushes Sysmon Configs☆91Jun 11, 2021Updated 5 years ago
- Submit Burp Suite extensions and updates to the BApp Store.☆18Updated this week
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆493Aug 19, 2026Updated last month
- ☆24Sep 9, 2025Updated last year