surface-watch monitors the authorized external attack surface of an organization over time
☆56May 11, 2026Updated 2 months ago
Alternatives and similar repositories for surface-watch
Users that are interested in surface-watch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆34Oct 30, 2025Updated 8 months ago
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Updated this week
- Automatically deploying Mythic C2 in Azure using Terraform☆20Jul 3, 2026Updated last week
- ☆12Dec 23, 2021Updated 4 years ago
- Fast Windows post-exploitation wins after initial access.☆29Jan 28, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Linux Persistence Detection, Hunting and Artifact Collection script☆24May 21, 2026Updated last month
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆56Updated this week
- Creating attacks paths across management and data planes☆64Jun 1, 2026Updated last month
- ☆79May 8, 2026Updated 2 months ago
- A PowerShell module used to deploy deceptive Active Directory Certificate Services (ADCS) certificate templates, using targeted ACEs to a…☆15Mar 9, 2026Updated 4 months ago
- A Pentesters Confluence Keyword Scanner☆21Dec 3, 2024Updated last year
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆18Mar 19, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- SigmaHQ pySigma CrowdStrike processing pipeline☆32Jun 14, 2026Updated last month
- An autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing preci…☆37Jun 24, 2026Updated 3 weeks ago
- A PowerShell script to prevent Sysmon from writing its events☆17Apr 23, 2020Updated 6 years ago
- Code canaries to quickly triage hallucinated ('slop') vulnerability reports☆95May 20, 2026Updated last month
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆20Feb 13, 2026Updated 5 months ago
- a list of useful feeds☆97May 15, 2026Updated 2 months ago
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆45Updated this week
- Modular Go framework for attack surface management, reconnaissance, and vulnerability scanning.☆159Jul 6, 2026Updated last week
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Run TTPs, with AI!☆140Feb 23, 2026Updated 4 months ago
- Living off the land Data Exfiltration methods☆60May 9, 2026Updated 2 months ago
- A CLI utility to scan S3 buckets permissions☆14May 14, 2023Updated 3 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆239Updated this week
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated 2 years ago
- MDE/MDI Defender setup for Ludus☆61Mar 14, 2026Updated 4 months ago
- OPSEC safe Kerberoasting in C#☆199Jun 14, 2022Updated 4 years ago
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆29Feb 10, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!☆529Updated this week
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Jul 3, 2026Updated last week
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 8 months ago
- A structured Python learning roadmap: 8 weeks of fundamentals + 4 stdlib-only projects. Daily commits · Quizzes · Exercises · Solutions.☆16Jul 9, 2026Updated last week
- All kinds of tiny shells☆65Feb 3, 2023Updated 3 years ago
- Discover Exposed AI Services☆191Apr 28, 2026Updated 2 months ago
- ☆26Feb 18, 2025Updated last year