Example Usage
# Monitor high network connections from a particular processID
Channel=Microsoft-Windows-Sysmon
(EventID=3 OR EventID=22)  (3=Network Connection, 22=DNS)
(DestinationHostname=*.1e100.net OR QueryName=*.gmail.com)
See also
100-redteam-projects
Free

Projects for security students…
365-Stealer
Free

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Cons…
mimipenguin
Free

A tool to dump the login password from the current linux user…
ExploitDB / SearchSploit
Open Source Kali

Archive of public exploits and vulnerable software maintained by Offensive Security. SearchSploit pr…
BeEF
Open Source Kali

Browser Exploitation Framework. Hooks web browsers via JavaScript and provides extensive command mod…
BloodHound
Open Source Kali

Uses graph theory to reveal hidden and often unintended relationships within Active Directory enviro…