Pentesting Active Directory – A Comprehensive Guide To Tools, Techniques, And Commands
This is a cheatsheet of tools and commands that I use to pentest Active Directory. It includes Windows, Impacket and PowerView commands, how to use Bloodhound and popular exploits such as Zerologon and NO-PAC. Enumeration Initial System Enumeration See local accounts net user See all of the accounts in the domain net user /domain Check if an account is a Domain Admin net user <account-name> domain See groups...
NodeSecure – Advanced JavaScript AST Analysis For Detecting Malicious Code
JavaScript AST analysis. This package has been created to export the NodeSecure AST Analysis to enable better code evolution and allow better access to developers and researchers. The goal is to quickly identify dangerous code and patterns for developers and Security researchers. Interpreting the results of this tool will still require you to have a set of security notions. Goals The objective of the...
SecretMagpie – The Comprehensive Secret Detection Tool For Your Repositories
Organisations struggle to scan for leaked secrets in ALL of their repos. It's easy to scan one repo, but time consuming and tedious to scan all of them. SecretMagpie is a secret detection tool that hunts out all the secrets hiding in ALL your repositories. It supports finding repos in Github, Gitlab, Azure DevOps (ADO), Bitbucket and the local file system. Given...
teler-waf : Securing Go-Based Web Applications With Advanced Middleware
teler-waf is a comprehensive security solution for Go-based web applications. It acts as an HTTP middleware, providing an easy-to-use interface for integrating IDS functionality with teler IDS into existing Go applications. By using teler-waf, you can help protect against a variety of web-based attacks, such as cross-site scripting (XSS) and SQL injection. The package comes with a standard net/http.Handler, making it easy to integrate...
DataComp-LM (DCLM) : Revolutionizing Language Model Training
Explore the cutting-edge DataComp-LM (DCLM) framework, designed to empower researchers and developers with the tools to construct and optimize large language models using diverse datasets. DCLM integrates comprehensive data handling procedures and scalable model training techniques, setting new benchmarks in efficiency and performance in the field of artificial intelligence. Table Of Contents Introduction Leaderboard Getting Started Selecting Raw Sources Processing the Data Deduplication Tokenize and Shuffle Model Training Evaluation Submission Contributing How...
Firefly : Revolutionizing Security Testing With Advanced Black-Box Fuzzing
Firefly is an advanced black-box fuzzer and not just a standard asset discovery tool. Firefly provides the advantage of testing a target with a large number of built-in checks to detect behaviors in the target. Advantages Hevy use of gorutines and internal hardware for great preformance Built-in engine that handles each task for "x" response results inductively Highly cusomized to handle more complex...
Terraform – Cross PaaS configuration management?
Happy Sunday from Software Expand! In this week's edition of Feedback Loop, we talk about the future of Windows Phone, whether it makes sense to build media centers discuss the preferences for metal vs. plastic on smartphones. All that and more past the break the proof of concept. Just because you can do something, should you? Samsung thinks so. Its...
ANNchor – Accelerating k-NN Graphs For Complex Metrics With Machine Learning
ANNchor is a python library which constructs approximate k-nearest neighbour graphs for slow metrics. The k-NN graph is an extremely useful data structure that appears in a wide variety of applications, for example: clustering, dimensionality reduction, visualisation and exploratory data analysis (EDA). However, if we want to use a slow metric, these k-NN graphs can take an exceptionally long time to compute....
Bailo – Revolutionizing Machine Learning Lifecycle Management
Bailo helps you manage the lifecycle of machine learning to support scalability, impact, collaboration, compliance and sharing. Built With Next.js Node.js MongoDB Seldon Getting Started Requirements: Node v18 Docker / Docker Compose Installation: To run in standalone mode, not development mode. Not for production use: docker build -t "bailo:standalone" -f ./Dockerfile.standalone . docker run --name bailo -p 8080:8080 -d bailo:standalone ```bash To run in development mode (modified files on your host machine will be...
Sleeper – Revolutionizing Data Management With Serverless, Scalable Key-Value Stores
Sleeper is a serverless, cloud-native, log-structured merge tree based, scalable key-value store. It is designed to allow the ingest of very large volumes of data at low cost. Data is stored in rows in tables. Each row has a key field, and an optional sort field, and some value fields. Queries for rows where the key takes a given...