QeeqBox ORG

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Analyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more)

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)

Scalable URL Sandbox for analyzing URLs and Domains from phishing attacks

Advanced Cyber Threat Map (Simplified, customizable, responsive and optimized)

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

Kali and Parrot OS docker images accessible via VNC, RDP and Web

Build custom OSINT tools and APIs (Ping, Traceroute, Scans, Archives, DNS, Scrape, Whois, Metadata & built-in database for more info) with this python package

🧬 Mitre Interactive Network Graph (APTs, Malware, Tools, Techniques & Tactics)

Agile Sandbox for analyzing Windows, Linux and macOS malware and execution behaviors

Custom security distro for remote penetration testing

ELKFH - Elastic, Logstash, Kibana, Filebeat and Honeypot (HTTP, HTTPS, SSH, RDP, VNC, Redis, MySQL, MONGO, SMB, LDAP)

Interface for Image-Related Deep Learning Models (E.g. NSFW, MAYBE and SFW)

An adversary may utilize a sim swapping attack for defeating 2fa authentication

An adversary may utilize a sim swapping attack for defeating 2fa authentication

Pure Honeypots with an automated bash script

A collection of attacks metadata that were used in my previous pen-test tools

Recent cyber attacks reports & interesting analysis files

Some extracted Features\IoCs\Artifacts\Patterns from APT Malware

No description.

An interactive world-map that has been used in live Cyber Threat interfaces

Threat intelligence or Cyber Threat Intelligence is the process of identifying and analyzing gathered information about past, current, and future cyber threats (Collecting information about a potential threat, then analyzing that information to learn more about the negative events)

Collection of exploits that were verified by an automated system

Cyber Kill Chain is a model that Lockheed Martin created for understanding (Describe the sequence of events) and stopping cyberattacks

A threat actor may gain access to data and functionalities by bypassing the target authentication mechanism

Multiple JSON files contain world cities with names, longitude & latitude, country, and timezone

Internal package for visualization

Cybersecurity is the measures taken to protect networks, devices, and data against cyberattacks

Digital Forensics is the process of finding and analyzing electronic data

JSON file that contains an update metadata of Automation Protocols (Industrial control system, process automation, building automation, automatic meter reading, and automobile)

JSON file contains all mobile number metadata (Country, prefix, and carrier)

A threat actor may inject malicious content into a vulnerable target

A threat actor may inject malicious content into webapp. The payload is reflected in the HTTP request and response, then executed in the victim's browser

A threat actor may lunch brute force to the two-factor authentication (2FA) logic causing unauthorized access to the target

Incident response is a set of steps that are used to handle the aftermath of a data breach or cyberattack

ICS-Visualizer is an interactive Industrial Control Systems (ICS) network graph that contains up-to-date related automation protocols metadata (Name, company, port, user manuals, external links, and mapped wireshark\namp modules and scripts).

blind-sql-injection

A threat actor may inject malicious content into webapp. The payload is not reflected in the HTTP request and response, then executed in the victim's browser

JSON file contains all countries metadata (Country name, cc, a3, and flag)

vulnerable-web-app

A threat actor may gain unauthorized access using the default username and password

A threat actor may guess the target credentials using a known username and password pairs gathered from previous brute-force attacks

HTTPS Proxy Firewall for testing

A threat actor may bypass the Completely Automated Public Turing test to tell Computers and Humans Apart (captcha) by breaking the solving logic, human-assisted solving services, or utilizing automated technology

A threat actor may access the user's account using a stolen or leaked valid (existing) session identifier

A threat actor may perform unauthorized functions belonging to another user with a higher privileges level

Data compliance is the process of following various regulations and standards to ensure that sensitive digital assets (data) are guarded against loss, theft, and misuse

JSON file contains all ports metadata

A threat actor may trick a victim into executing native template syntax on a vulnerable target

A threat actor may list files on a misconfigured server

Risk management is the process of identifying, assessing, treating, and monitoring any negative events that affect a company's ability to operate (Preventing them or minimizing their harmful impact)

qeeqbox.github.io/network-security-for-qeeqs

A threat actor may re-use a stolen or leaked session identifier to access the user's account

No description.

A threat actor may alter structured query language (SQL) query to read, modify and write to the database or execute administrative commands for further chained attacks

A threat actor may send a malicious redirect request for a vulnerable target to a victim; the victim gets redirected to a malicious website that threat actor controls

No description.

No description.

A threat actor may perform unauthorized functions belonging to another user with a similar privileges level

A threat actor may interfere with an application's processing of extensible markup language (XML) data to view the content of a target's files

A threat actor is any person, group, or entity that could harm to the cyber realm

A threat actor may trick a user into using a known session identifier to log in. after logging in, the session identifier is used to gain access to the user's account

A threat actor may interfere with an application's processing of extensible stylesheet language transformations (XSLT) for extensible markup language (XML) to read or modify data on the target

A threat actor may access the user's account using a stolen or leaked valid (existing) session identifier

Icterid Webapp Template

Asyncio websocket http server [Needed for internal testing]

JSON file contains all private ip ranges with description

JSON file contains all public ip ranges with description

Github Settings

A threat actor may inject arbitrary operating system (OS) commands on target

A threat actor may tamper with a stream that gets deserialized on the target, causing the target to access data or perform non-intended actions

A threat actor may cause a vulnerable target to include/retrieve remote file

A threat actor may cause a vulnerable target to include/retrieve local file

A threat actor may trick an authenticated or trusted victim into executing unauthorized actions on their behalf

No description.

The practice of ensuring that people or objects have the right level of access to assets

No description.

No description.

A threat actor may guess the target credentials using a single password with a large set of usernames against the target

A threat actor may alter the XML path language (XPath) query to read data on the target

Access Control is using security techniques to protect a system against unauthorized access

Safeguarding your personal information (How your info is protected)

Countermeasures or safeguards for detecting, preventing, and mitigating cyber threats and attacks (Protect assets)

Data classification defines and categorizes data according to its type, sensitivity, and value

A threat actor may alter the template syntax on the vulnerable target to execute commands

Data states refer to structured and unstructured data divided into three categories (At Rest, In Use, and In Transit)

Data Lifecycle Management (DLM) is a policy-based model for managing data in an organization

asynico websockets redis server (Needed for internal testing)

tornado websockets redis server (Needed for internal testing)

Some scripts for workflows (Moved from Macaw)

No description.

Nginx reverse proxy for testing

Tasker for internal projects