GraphSpy
GraphSpy is a tool that allows users to store and manage access and refresh tokens for multiple users and scopes in one location, providing a convenient way to manage tokens and access various resources. The tool is built to work on every operating system, although it was mainly tested on Linux and Windows. It can be launched using the graphspy command from any location on the system and provides a web interface to manage tokens. GraphSpy also provides features such as custom request images and toast notifications, making it a comprehensive tool for token management.
FEATURES
ALTERNATIVES
A collection of tests for Local File Inclusion (LFI) vulnerabilities using Burp Suite.
Adversary emulation framework for testing security measures in network environments.
A powerful tool for hiding the true location of your Teamserver, evading detection from Incident Response, redirecting users, blocking specific IP addresses, and managing Malleable C2 traffic in Red Team engagements.
Kali Linux is a specialized Linux distribution for cybersecurity professionals, focusing on penetration testing and security auditing.
A penetration testing tool for intercepting SSH connections and logging plaintext passwords.
A C#-based Command and Control Framework for remote access and control of compromised systems.
A tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) for offensive security purposes.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.