blitzstrike 1.0.20 → 1.0.21

package/manuals/active-directory/certipy.md

@@ -0,0 +1,36 @@
+# certipy
+
+- **Category**: Active Directory
+- **Risk Level**: 🔴 High
+
+---
+
+## Description
+
+AD CS abuse. Focus areas: adcs, certificate, ad.
+
+## Installation
+
+```bash
+# linux: pip install --break-system-packages certipy-ad
+# darwin: pip install --break-system-packages certipy-ad
+# win32: pip install --break-system-packages certipy-ad
+```
+
+## Usage
+
+```bash
+certipy -find <find>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `find` | Mode (required) |
+| `-u` | Username |
+| `-dc-ip` | DC IP |
+
+## Tags
+
+adcs, certificate, ad

package/manuals/blue-team/clamav.md

@@ -0,0 +1,34 @@
+# clamav
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Antivirus. Focus areas: av, malware.
+
+## Installation
+
+```bash
+# linux: apt install -y clamav
+# darwin: brew install clamav
+# win32: choco install clamav
+```
+
+## Usage
+
+```bash
+clamscan - <>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-r` | Recursive |
+
+## Tags
+
+av, malware

package/manuals/blue-team/hayabusa.md

@@ -0,0 +1,39 @@
+# hayabusa
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Windows event log forensics. Focus areas: windows, eventlog, forensics. Alternatives: chainsaw.
+
+## Installation
+
+```bash
+# linux: download binary from github
+# darwin: manual
+# win32: manual
+```
+
+## Usage
+
+```bash
+hayabusa -csv-timeline <csv-timeline>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `csv-timeline` | Mode (required) |
+| `-d` | Log dir |
+
+## Tags
+
+windows, eventlog, forensics
+
+## Alternatives
+
+chainsaw

package/manuals/blue-team/osquery.md

@@ -0,0 +1,28 @@
+# osquery
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+SQL-powered host monitoring. Focus areas: host, edr, monitor.
+
+## Installation
+
+```bash
+# linux: apt install -y osquery
+# darwin: brew install --cask osquery
+# win32: choco install osquery
+```
+
+## Usage
+
+```bash
+osqueryi - <>
+```
+
+## Tags
+
+host, edr, monitor

package/manuals/blue-team/sigma.md

@@ -0,0 +1,35 @@
+# sigma
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Generic detection rules. Focus areas: detection, rules, siem.
+
+## Installation
+
+```bash
+# linux: pip install --break-system-packages sigma-cli
+# darwin: pip install --break-system-packages sigma-cli
+# win32: pip install --break-system-packages sigma-cli
+```
+
+## Usage
+
+```bash
+sigma -convert <convert>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `convert` | Mode (required) |
+| `-t` | Target |
+
+## Tags
+
+detection, rules, siem

package/manuals/blue-team/snort.md

@@ -0,0 +1,40 @@
+# snort
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Network IDS/IPS. Focus areas: ids, network. Alternatives: suricata.
+
+## Installation
+
+```bash
+# linux: apt install -y snort
+# darwin: brew install snort
+# win32: manual
+```
+
+## Usage
+
+```bash
+snort -h
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-i` | Interface |
+| `-c` | Config |
+| `-A` | Alert mode |
+
+## Tags
+
+ids, network
+
+## Alternatives
+
+suricata

package/manuals/blue-team/suricata.md

@@ -0,0 +1,40 @@
+# suricata
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Network IDS/IPS. Focus areas: ids, ips, network. Alternatives: snort, zeek.
+
+## Installation
+
+```bash
+# linux: apt install -y suricata
+# darwin: brew install suricata
+# win32: choco install suricata
+```
+
+## Usage
+
+```bash
+suricata -h
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-i` | Interface |
+| `-r` | PCAP |
+| `-c` | Config |
+
+## Tags
+
+ids, ips, network
+
+## Alternatives
+
+snort, zeek

package/manuals/blue-team/velociraptor.md

@@ -0,0 +1,28 @@
+# velociraptor
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+DFIR + monitoring. Focus areas: dfir, edr, monitor.
+
+## Installation
+
+```bash
+# linux: download from github releases
+# darwin: manual
+# win32: manual
+```
+
+## Usage
+
+```bash
+velociraptor - <>
+```
+
+## Tags
+
+dfir, edr, monitor

package/manuals/blue-team/wazuh.md

@@ -0,0 +1,28 @@
+# wazuh
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+SIEM + XDR. Focus areas: siem, xdr, edr.
+
+## Installation
+
+```bash
+# linux: curl -s https://packages.wazuh.com/4.x/install.sh | bash
+# darwin: manual
+# win32: manual
+```
+
+## Usage
+
+```bash
+wazuh -h
+```
+
+## Tags
+
+siem, xdr, edr

package/manuals/blue-team/zeek.md

@@ -0,0 +1,39 @@
+# zeek
+
+- **Category**: Blue Team / Detection
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Network security monitor. Focus areas: network, monitor, nsm. Alternatives: suricata.
+
+## Installation
+
+```bash
+# linux: apt install -y zeek
+# darwin: brew install zeek
+# win32: manual
+```
+
+## Usage
+
+```bash
+zeek -r <r>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-r` | PCAP (required) |
+| `-C` | Ignore checksum |
+
+## Tags
+
+network, monitor, nsm
+
+## Alternatives
+
+suricata

package/manuals/cloud-native/cloudfox.md

@@ -0,0 +1,35 @@
+# cloudfox
+
+- **Category**: Cloud Security
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Cloud attack path finder. Focus areas: cloud, attack-path.
+
+## Installation
+
+```bash
+# linux: download from github releases
+# darwin: manual
+# win32: manual
+```
+
+## Usage
+
+```bash
+cloudfox -aws <aws>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `aws` | Provider (required) |
+| `-p` | Profile |
+
+## Tags
+
+cloud, attack-path

package/manuals/crypto/ciphey.md

@@ -0,0 +1,34 @@
+# ciphey
+
+- **Category**: Cryptography
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Cipher/encoding auto-decode. Focus areas: cipher, decode, ctf.
+
+## Installation
+
+```bash
+# linux: pip install --break-system-packages ciphey
+# darwin: pip install --break-system-packages ciphey
+# win32: pip install --break-system-packages ciphey
+```
+
+## Usage
+
+```bash
+ciphey -t <t>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-t` | Ciphertext (required) |
+
+## Tags
+
+cipher, decode, ctf

package/manuals/crypto/rsactftool.md

@@ -0,0 +1,35 @@
+# rsactftool
+
+- **Category**: Cryptography
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+RSA attack toolkit. Focus areas: rsa, crypto, ctf.
+
+## Installation
+
+```bash
+# linux: git clone https://github.com/RsaCtfTool/RsaCtfTool && pip install -r requirements.txt
+# darwin: manual
+# win32: manual
+```
+
+## Usage
+
+```bash
+RsaCtfTool -h
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `--publickey` | Public key |
+| `--attack` | Attack type |
+
+## Tags
+
+rsa, crypto, ctf

package/manuals/exploitation/gopherus.md

@@ -0,0 +1,28 @@
+# gopherus
+
+- **Category**: Exploitation
+- **Risk Level**: 🔴 High
+
+---
+
+## Description
+
+Gopher SSRF payloads. Focus areas: ssrf, gopher, payload.
+
+## Installation
+
+```bash
+# linux: git clone https://github.com/tarunkant/Gopherus && cd Gopherus && pip install -r requirements.txt
+# darwin: manual
+# win32: manual
+```
+
+## Usage
+
+```bash
+gopherus - <>
+```
+
+## Tags
+
+ssrf, gopher, payload

package/manuals/exploitation/nosqlmap.md

@@ -0,0 +1,34 @@
+# nosqlmap
+
+- **Category**: Exploitation
+- **Risk Level**: 🔴 High
+
+---
+
+## Description
+
+NoSQL injection. Focus areas: nosql, injection.
+
+## Installation
+
+```bash
+# linux: pip install --break-system-packages nosqlmap
+# darwin: pip install --break-system-packages nosqlmap
+# win32: pip install --break-system-packages nosqlmap
+```
+
+## Usage
+
+```bash
+nosqlmap -u <u>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-u` | URL (required) |
+
+## Tags
+
+nosql, injection

package/manuals/exploitation/ssrfmap.md

@@ -0,0 +1,40 @@
+# ssrfmap
+
+- **Category**: Exploitation
+- **Risk Level**: 🔴 High
+
+---
+
+## Description
+
+SSRF exploitation. Focus areas: ssrf, exploit. Alternatives: gopherus.
+
+## Installation
+
+```bash
+# linux: git clone https://github.com/swisskyrepo/SSRFmap && cd SSRFmap && pip install -r requirements.txt
+# darwin: manual
+# win32: manual
+```
+
+## Usage
+
+```bash
+ssrfmap -r <r>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-r` | Request file (required) |
+| `-p` | Param |
+| `-m` | Module |
+
+## Tags
+
+ssrf, exploit
+
+## Alternatives
+
+gopherus

package/manuals/exploitation/ysoserial.md

@@ -0,0 +1,32 @@
+# ysoserial
+
+- **Category**: Exploitation
+- **Risk Level**: 🔴 High
+
+---
+
+## Description
+
+Java deserialization payloads. Focus areas: deserialization, java. Alternatives: phpggc.
+
+## Installation
+
+```bash
+# linux: download jar from github
+# darwin: brew install ysoserial
+# win32: download jar from github
+```
+
+## Usage
+
+```bash
+ysoserial - <>
+```
+
+## Tags
+
+deserialization, java
+
+## Alternatives
+
+phpggc

package/manuals/forensics/autopsy.md

@@ -0,0 +1,28 @@
+# autopsy
+
+- **Category**: Forensics
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Digital forensics platform. Focus areas: forensics, dfir, gui.
+
+## Installation
+
+```bash
+# linux: download from sleuthkit.org
+# darwin: brew install --cask autopsy
+# win32: choco install autopsy
+```
+
+## Usage
+
+```bash
+autopsy -h
+```
+
+## Tags
+
+forensics, dfir, gui

package/manuals/forensics/bulk_extractor.md

@@ -0,0 +1,34 @@
+# bulk_extractor
+
+- **Category**: Forensics
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Extract emails/URLs/creds. Focus areas: carving, forensics, email.
+
+## Installation
+
+```bash
+# linux: apt install -y bulk-extractor
+# darwin: brew install bulk_extractor
+# win32: manual
+```
+
+## Usage
+
+```bash
+bulk_extractor -o <o> - <>
+```
+
+## Parameter Reference
+
+| Parameter | Description |
+|------|------|
+| `-o` | Output dir (required) |
+
+## Tags
+
+carving, forensics, email

package/manuals/forensics/oletools.md

@@ -0,0 +1,28 @@
+# oletools
+
+- **Category**: Forensics
+- **Risk Level**: 🟠 Medium
+
+---
+
+## Description
+
+Office malicious doc analysis. Focus areas: malware, office, macro.
+
+## Installation
+
+```bash
+# linux: pip install --break-system-packages oletools
+# darwin: pip install --break-system-packages oletools
+# win32: pip install --break-system-packages oletools
+```
+
+## Usage
+
+```bash
+olevba - <>
+```
+
+## Tags
+
+malware, office, macro