A routing pack that tells AI coding agents which reverse-engineering or pentest methodology and tools to use for APKs, binaries, JS crypto, PCAPs, and CTFs.
Automation to assess the state of your M365 tenant against CISA's baselines
Community-driven baseline to accelerate Intune adoption and learning.
Cross-platform incident response and live forensic artifact collector with built-in detection, structured analysis, and report generation — designed for fast, actionable security investigations.
Complete reverse-skill (88 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
🦅 Seagull Profile - Unrestricted CTF/Red-team AI personality for Hermes Agent | 海鸥破甲人格
A PowerShell script that force-removes Windows 11 AI components such as Copilot, Recall, and related AI packages.
The Official USB Rubber Ducky Payload Repository
Manages, configures, extracts and monitors Microsoft 365 tenant configurations
Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.
Maester is a test automation framework to help you stay in control of your Microsoft security configuration.
Boot operating systems directly from ISO/WIM images
Resources for improving Customer Experience with Azure Network Security
[Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks
SIEM Tactics, Techiques, and Procedures
Repository with the scripts that I have used in my blogs on https://powershellisfun.com. If you like these, please sponsor this project using the Sponsor button below or buy me a coffee :) https://www.buymeacoffee.com/powershellisfun
Active Directory Auditing and Enumeration
A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.
Salesforce DX code review: Apex, LWC, Flows, security (CRUD/FLS), governors, and Bugbot.
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.
M365 PowerShell scripts for Microsoft 365 administration: Intune, Entra ID, Defender, Exchange Online, Purview, Teams, SharePoint and tenant management. Microsoft Graph and modern modules only, read-only by default, -WhatIf on every change, full comment-based help.
PowerShell + DISM tool that builds a debloated Windows 11 ISO with TPM and Secure Boot bypass. Works on the latest Windows 11 ISOs. Open source tiny11 alternative.
Inventario as-built y health check de servidores Windows en un solo .ps1
Copy files from damaged disks FAST — skip bad sectors, map readable areas, and recover as much data as possible without wasting hours on unreadable regions.
Скиллы для Claude Code: дисциплинированный пайплайн разработки и два пред-запусковых аудита — сайта и безопасности приложения
—