surface-watch monitors the authorized external attack surface of an organization over time
☆55May 11, 2026Updated 3 months ago
Alternatives and similar repositories for surface-watch
Users that are interested in surface-watch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆34Oct 30, 2025Updated 9 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated last month
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆32Feb 26, 2026Updated 6 months ago
- Run BloodHound CE in a single-user setup with podman☆37Nov 12, 2025Updated 9 months ago
- ☆12Dec 23, 2021Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Convert Sigma rules to SIEM queries, directly in your browser.☆122Aug 19, 2026Updated last week
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- Public repository of Sigma and YARA rules created by Synacktiv☆21Oct 15, 2025Updated 10 months ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆59Updated this week
- Creating attacks paths across management and data planes☆64Jul 28, 2026Updated 3 weeks ago
- The MAGIC tool is a wrapper around the Microsoft Graph Python SDK, designed to download incident response-relevant data from M365 environ…☆35Apr 13, 2026Updated 4 months ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A PowerShell module used to deploy deceptive Active Directory Certificate Services (ADCS) certificate templates, using targeted ACEs to a…☆15Mar 9, 2026Updated 5 months ago
- Submit Burp Suite extensions and updates to the BApp Store.☆18Updated this week
- Linux Persistence Detection, Hunting and Artifact Collection script☆25Jul 20, 2026Updated last month
- ☆79May 8, 2026Updated 3 months ago
- An autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing preci…☆46Updated this week
- Code canaries to quickly triage hallucinated ('slop') vulnerability reports☆97May 20, 2026Updated 3 months ago
- a list of useful feeds☆99May 15, 2026Updated 3 months ago
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- Fast Windows post-exploitation wins after initial access.☆29Jan 28, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆62Aug 1, 2026Updated 3 weeks ago
- A CLI utility to scan S3 buckets permissions☆14May 14, 2023Updated 3 years ago
- Run TTPs, with AI!☆140Feb 23, 2026Updated 6 months ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- Living off the land Data Exfiltration methods☆61May 9, 2026Updated 3 months ago
- OPSEC safe Kerberoasting in C#☆200Jun 14, 2022Updated 4 years ago
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated 2 years ago
- SigmaHQ pySigma CrowdStrike processing pipeline☆33Jun 14, 2026Updated 2 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆466Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- All kinds of tiny shells☆65Feb 3, 2023Updated 3 years ago
- Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.☆20Jan 22, 2026Updated 7 months ago
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆48Oct 20, 2025Updated 10 months ago
- For testing or trolling LLM based pentesting frameworks.☆18Feb 18, 2026Updated 6 months ago
- ☆18Oct 1, 2025Updated 10 months ago
- Advanced test for proxy & waf☆14Feb 10, 2026Updated 6 months ago
- ☆28Mar 14, 2026Updated 5 months ago