This is your work, valued
Projects from the auditors and consultants from Wavestone's Cybersecurity & Digital Trust practice
EDRSandblast. C
1.8kabaddon. Python
333hadoop-attack-library. A collection of pentest tools and resources targeting Hadoop environments
265dyode. A low-cost, DIY data diode for ICS
195wavecrack. Wavestone's web interface for password cracking with hashcat
172powerpxe. Powershell script to extract information from boot PXE
160AD-security-workshop. Resources for our Active Directory security workshops
140DEFCON-CICD-pipelines-workshop. HCL
94Invoke-CleverSpray. Password Spraying Script detecting current and previous passwords of Active Directory User
66opcua-scan. Tooling for discovery & information gathering from OPC-UA servers
271-2-3-Cyber.
18mainframe-attack-library. Collection of scripts to p*wn mainframes
16fun-with-modbus-0x5a. Material from ICS Village talk at DEFCON 25
13s7-get. Tools to interact with Siemens PLCs
11bhasia23-opcuhack. Slides & content for our Arsenal lab session at BlackHat Asia 2023
10Malware-Development-On-Secured-Environment. C
9MISC-AD-trusts-relationships. Lab files & scripts for our articles in MISC regarding Active Directory trusts relationships
7plc-code-security. Experiments with the Top 20 Secure PLC Coding Practices
7bheu22-capture-the-train. Slides and code snippets for the Arsenal demo lab session at BlackHat Europe 2022
6jumping-from-cloud-to-on-premises-and-the-other-way-around.
4dc32-securing-ics-101.
4caldera-opcua. OPC-UA protocol plugin for MITRE CALDERA
4dc32-hack-the-connected-plant. Slides from our workshop at DEFCON 32 on "Hacking the connected plant"
3caldera-s7. s7 protocol plugin for MITRE CALDERA
3dc33-hacktheconnectedplant-ai. Slides from our Workshop at DEFCON33
1