The LOLBAS project is a curated dataset of Windows binaries, scripts, and libraries that can be abused for malicious purposes (Living Off The Land Binaries and Scripts). Each entry is documented in YAML files with a standardized schema, including technical details, use cases, MITRE ATT&CK mappings, detection artifacts, and external references. The repository serves as a threat intelligence resource for offensive security research and defensive security operations, enabling threat hunting and detection rule development. Data is organized by file type (binaries, libraries, scripts) and maintained through community contributions with automated validation via Pydantic schemas.
CHAPS (Configuration Hardening Assessment PowerShell Scripts) is a security assessment toolkit designed for Windows systems where additional assessment software cannot be installed. It consists of three script variants (PowerShell v3+, PowerShell v2, and CMD batch) that perform 63 security checks across System Info, Security, Authentication, Network, PowerShell, and Logging categories. All scripts output results in Markdown format to stdout. The companion analysis tool (chaps-analyze.ps1) processes these reports to produce structured findings with recommendations, risk explanations, and MITRE ATT&CK mappings using a JSON knowledge base. The toolkit is specifically designed for ICS/OT environments, air-gapped systems, and locked-down Windows installations where traditional security assessment tools cannot be deployed.
This repository is a curated directory of cybersecurity tools and resources, organized into categories such as AI security, API pentesting, C2 frameworks, forensics, OSINT, and more. It is built as a static documentation site using Retype, with markdown pages listing external links and brief descriptions. The repository contains no executable application code, data pipelines, or analytical models. Its primary function is to serve as a reference index for security professionals, maintained through periodic updates to links and categories. The codebase is essentially a collection of markdown files and configuration for the static site generator, with a large set of default password text files included as a resource. There is no software architecture, entry points, or data flows beyond the static site generation. The repo is well-organized and regularly updated, but it offers no reusable software components or novel engineering patterns.