surface-watch monitors the authorized external attack surface of an organization over time
☆56May 11, 2026Updated 2 months ago
Alternatives and similar repositories for surface-watch
Users that are interested in surface-watch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆34Oct 30, 2025Updated 9 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated last month
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆30Feb 26, 2026Updated 5 months ago
- Run BloodHound CE in a single-user setup with podman☆37Nov 12, 2025Updated 8 months ago
- ☆12Dec 23, 2021Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Convert Sigma rules to SIEM queries, directly in your browser.☆121Jun 20, 2026Updated last month
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Public repository of Sigma and YARA rules created by Synacktiv☆21Oct 15, 2025Updated 9 months ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆57Updated this week
- Creating attacks paths across management and data planes☆64Jul 28, 2026Updated last week
- The MAGIC tool is a wrapper around the Microsoft Graph Python SDK, designed to download incident response-relevant data from M365 environ…☆35Apr 13, 2026Updated 3 months ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆18Mar 19, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A PowerShell module used to deploy deceptive Active Directory Certificate Services (ADCS) certificate templates, using targeted ACEs to a…☆15Mar 9, 2026Updated 4 months ago
- Submit Burp Suite extensions and updates to the BApp Store.☆18Jul 24, 2026Updated last week
- Linux Persistence Detection, Hunting and Artifact Collection script☆24Jul 20, 2026Updated 2 weeks ago
- ☆79May 8, 2026Updated 2 months ago
- An autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing preci…☆40Jun 24, 2026Updated last month
- Code canaries to quickly triage hallucinated ('slop') vulnerability reports☆96May 20, 2026Updated 2 months ago
- a list of useful feeds☆98May 15, 2026Updated 2 months ago
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- Fast Windows post-exploitation wins after initial access.☆29Jan 28, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆59Updated this week
- Run TTPs, with AI!☆140Feb 23, 2026Updated 5 months ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- Living off the land Data Exfiltration methods☆61May 9, 2026Updated 2 months ago
- OPSEC safe Kerberoasting in C#☆200Jun 14, 2022Updated 4 years ago
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated 2 years ago
- SigmaHQ pySigma CrowdStrike processing pipeline☆33Jun 14, 2026Updated last month
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆343Updated this week
- All kinds of tiny shells☆65Feb 3, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.☆20Jan 22, 2026Updated 6 months ago
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆48Oct 20, 2025Updated 9 months ago
- For testing or trolling LLM based pentesting frameworks.☆18Feb 18, 2026Updated 5 months ago
- ☆18Oct 1, 2025Updated 10 months ago
- Advanced test for proxy & waf☆14Feb 10, 2026Updated 5 months ago
- ☆28Mar 14, 2026Updated 4 months ago
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Jul 3, 2026Updated last month