.gitmodules

[submodule "offensive/tools/LaZagne"]
	path = offensive/tools/LaZagne
	url = https://github.com/AlessandroZ/LaZagne
[submodule "offensive/tools/linikatz"]
	path = offensive/tools/linikatz
	url = https://github.com/CiscoCXSecurity/linikatz
[submodule "offensive/tools/unix-privesc-check"]
	path = offensive/tools/unix-privesc-check
	url = https://github.com/ciscocxsecurity/unix-privesc-check
[submodule "offensive/tools/LinEnum"]
	path = offensive/tools/LinEnum
	url = https://github.com/rebootuser/LinEnum
[submodule "malware/pocs/fireELF"]
	path = malware/pocs/fireELF
	url = https://github.com/rek7/fireELF
[submodule "malware/pocs/ripmeep-memory-injector"]
	path = malware/pocs/ripmeep-memory-injector
	url = https://github.com/timb-machine-mirrors/ripmeep-memory-injector
[submodule "offensive/tools/Orc"]
	path = offensive/tools/Orc
	url = https://github.com/zMarch/Orc
[submodule "offensive/tools/SUDO_KILLER"]
	path = offensive/tools/SUDO_KILLER
	url = https://github.com/TH3xACE/SUDO_KILLER
[submodule "offensive/tools/sudo-parser"]
	path = offensive/tools/sudo-parser
	url = https://github.com/CiscoCXSecurity/sudo-parser
[submodule "offensive/tools/nfsshell"]
	path = offensive/tools/nfsshell
	url = https://github.com/NetDirect/nfsshell
[submodule "malware/pocs/phath0m-JadedWraith"]
	path = malware/pocs/phath0m-JadedWraith
	url = https://github.com/timb-machine-mirrors/phath0m-JadedWraith
[submodule "offensive/tools/age"]
	path = offensive/tools/age
	url = https://github.com/FiloSottile/age
[submodule "offensive/tools/LDAP-Password-Hunter"]
	path = offensive/tools/LDAP-Password-Hunter
	url = https://github.com/oldboy21/LDAP-Password-Hunter
[submodule "offensive/tools/Bashark"]
	path = offensive/tools/Bashark
	url = https://github.com/redcode-labs/Bashark
[submodule "malware/pocs/parasite"]
	path = malware/pocs/parasite
	url = https://github.com/jtripper/parasite
[submodule "malware/pocs/mandibule"]
	path = malware/pocs/mandibule
	url = https://github.com/ixty/mandibule
[submodule "malware/pocs/Reptile"]
	path = malware/pocs/Reptile
	url = https://github.com/f0rb1dd3n/Reptile
[submodule "malware/pocs/rootkit"]
	path = malware/pocs/rootkit
	url = https://github.com/nurupo/rootkit
[submodule "malware/pocs/vlany"]
	path = malware/pocs/vlany
	url = https://github.com/mempodippy/vlany
[submodule "malware/pocs/memdlopen"]
	path = malware/pocs/memdlopen
	url = https://github.com/m1m1x/memdlopen
[submodule "offensive/tools/kerbrute"]
	path = offensive/tools/kerbrute
	url = https://github.com/ropnop/kerbrute
[submodule "offensive/tools/windapsearch"]
	path = offensive/tools/windapsearch
	url = https://github.com/ropnop/windapsearch
[submodule "offensive/tools/enum4linux"]
	path = offensive/tools/enum4linux
	url = https://github.com/CiscoCXSecurity/enum4linux
[submodule "offensive/tools/nosecmem"]
	path = offensive/tools/nosecmem
	url = https://github.com/JonathonReinhart/nosecmem
[submodule "malware/pocs/linux-pam-backdoor"]
	path = malware/pocs/linux-pam-backdoor
	url = https://github.com/zephrax/linux-pam-backdoor
[submodule "malware/source/linux.mirai"]
	path = malware/source/linux.mirai
	url = https://github.com/0x27/linux.mirai
[submodule "defensive/yara/yara-rules-rules"]
	path = defensive/yara/yara-rules-rules
	url = https://github.com/Yara-Rules/rules
[submodule "offensive/tools/malware-bazaar"]
	path = offensive/tools/malware-bazaar
	url = https://github.com/cocaman/malware-bazaar
[submodule "malware/binaries/APT_REPORT"]
	path = malware/binaries/APT_REPORT
	url = https://github.com/blackorbird/APT_REPORT
[submodule "malware/binaries/Labeled-Elfs"]
	path = malware/binaries/Labeled-Elfs
	url = https://github.com/nimrodpar/Labeled-Elfs
[submodule "malware/binaries/b374k"]
	path = malware/binaries/b374k
	url = https://github.com/b374k/b374k
[submodule "malware/source/vxunderground-MalwareSourceCode"]
	path = malware/source/vxunderground-MalwareSourceCode
	url = https://github.com/vxunderground/MalwareSourceCode
[submodule "malware/source/linux.wifatch"]
	path = malware/source/linux.wifatch
	url = https://gitlab.com/rav7teif/linux.wifatch
[submodule "malware/pocs/BismuthScorpion"]
	path = malware/pocs/BismuthScorpion
	url = https://github.com/EvelynSubarrow/BismuthScorpion
[submodule "malware/pocs/IridiumScorpion"]
	path = malware/pocs/IridiumScorpion
	url = https://github.com/EvelynSubarrow/IridiumScorpion
[submodule "offensive/tools/0117c24164ee715e750150633c7c1782"]
	path = malware/pocs/zznop-mem-loader
	url = https://gist.github.com/zznop/0117c24164ee715e750150633c7c1782
[submodule "offensive/tools/tickey"]
	path = offensive/tools/tickey
	url = https://github.com/TarlogicSecurity/tickey
[submodule "offensive/tools/mimipenguin"]
	path = offensive/tools/mimipenguin
	url = https://github.com/huntergregal/mimipenguin
[submodule "offensive/tools/gnome-keyring-dumper"]
	path = offensive/tools/gnome-keyring-dumper
	url = https://github.com/mnagel/gnome-keyring-dumper
[submodule "malware/pocs/3snake"]
	path = malware/pocs/3snake
	url = https://github.com/blendin/3snake
[submodule "defensive/tools/LiME"]
	path = defensive/tools/LiME
	url = https://github.com/504ensicsLabs/LiME
[submodule "malware/pocs/devpops"]
	path = malware/pocs/devpops
	url = https://github.com/stealth/devpops
[submodule "offensive/tools/node-bash-obfuscate"]
	path = offensive/tools/node-bash-obfuscate
	url = https://github.com/willshiao/node-bash-obfuscate
[submodule "malware/pocs/azazel"]
	path = malware/pocs/azazel
	url = https://github.com/chokepoint/azazel
[submodule "offensive/tools/netifera"]
	path = offensive/tools/netifera
	url = https://github.com/netifera/netifera
[submodule "malware/pocs/fileless-elf-exec"]
	path = malware/pocs/fileless-elf-exec
	url = https://github.com/nnsee/fileless-elf-exec
[submodule "malware/source/sebd-0.2"]
	path = malware/source/sebd-0.2
	url = https://github.com/0x27/sebd-0.2
[submodule "malware/source/Umbreon-Rootkit"]
	path = malware/source/Umbreon-Rootkit
	url = https://github.com/NexusBots/Umbreon-Rootkit
[submodule "defensive/tools/Limon"]
	path = defensive/tools/Limon
	url = https://github.com/monnappa22/Limon
[submodule "offensive/tools/pam_steal"]
	path = malware/pocs/ONsec-Lab-pam_steal
	url = https://github.com/ONsec-Lab/scripts
[submodule "malware/binaries/malware-ioc"]
	path = malware/binaries/malware-ioc
	url = https://github.com/eset/malware-ioc
[submodule "malware/source/caffsec-malware-analysis"]
	path = malware/source/caffsec-malware-analysis
	url = https://github.com/jwne/caffsec-malware-analysis
[submodule "malware/binaries/adamcaudill-EquationGroupLeak"]
	path = malware/binaries/adamcaudill-EquationGroupLeak
	url = https://github.com/timb-machine-mirrors/adamcaudill-EquationGroupLeak
[submodule "malware/binaries/EQGRP"]
	path = malware/binaries/EQGRP
	url = https://github.com/x0rz/EQGRP
[submodule "offensive/tools/timb-machine-fileless"]
	path = offensive/tools/timb-machine-fileless
	url = https://gist.github.com/timb-machine/7bd75479ee29aee8762952ea16908eb0
[submodule "offensive/tools/zznop-fileless"]
	path = offensive/tools/zznop-fileless
	url = https://gist.github.com/zznop/0117c24164ee715e750150633c7c1782
[submodule "offensive/tools/alichtman-malware-techniques"]
	path = offensive/tools/alichtman-malware-techniques
	url = https://github.com/alichtman/malware-techniques
[submodule "malware/source/sterben"]
	path = malware/source/sterben
	url = https://github.com/HeapAllocate/sterben
[submodule "malware/pocs/santa"]
	path = malware/pocs/santa
	url = https://github.com/roddux/santa
[submodule "malware/pocs/memit"]
	path = malware/pocs/memit
	url = https://github.com/liamg/memit
[submodule "malware/pocs/KAAL_BHAIRAV"]
	path = malware/pocs/KAAL_BHAIRAV
	url = https://github.com/compilepeace/KAAL_BHAIRAV
[submodule "malware/pocs/msf-elf-in-memory-execution"]
	path = malware/pocs/msf-elf-in-memory-execution
	url = https://github.com/fbkcs/msf-elf-in-memory-execution
[submodule "offensive/tools/AutoSUID"]
	path = offensive/tools/AutoSUID
	url = https://github.com/IvanGlinkin/AutoSUID
[submodule "offensive/tools/bad-bpf"]
	path = offensive/tools/bad-bpf
	url = https://github.com/pathtofile/bad-bpf
[submodule "offensive/tools/KeyTabExtract"]
	path = offensive/tools/KeyTabExtract
	url = https://github.com/sosdave/KeyTabExtract
[submodule "offensive/tools/khook"]
	path = offensive/tools/khook
	url = https://github.com/milabs/khook
[submodule "malware/pocs/linker_preloading_virus"]
	path = malware/pocs/linker_preloading_virus
	url = https://github.com/elfmaster/linker_preloading_virus
[submodule "malware/pocs/linux-inject"]
	path = malware/pocs/linux-inject
	url = https://github.com/gaffe23/linux-inject
[submodule "malware/pocs/intruducer"]
	path = malware/pocs/intruducer
	url = https://github.com/vfsfitvnm/intruducer
[submodule "malware/pocs/moonwalk"]
	path = malware/pocs/moonwalk
	url = https://github.com/mufeedvh/moonwalk
[submodule "malware/binaries/Linux-Malware-Samples"]
	path = malware/binaries/Linux-Malware-Samples
	url = https://github.com/MalwareSamples/Linux-Malware-Samples
[submodule "articles/vlamer-hack-back"]
	path = articles/vlamer-hack-back
	url = https://gist.githubusercontent.com/vlamer/2c2ec2ca80a84ab21a32
[submodule "articles/unixfreaxjp-MMD20200522-kaiten-ak47-freak"]
	path = articles/unixfreaxjp-MMD20200522-kaiten-ak47-freak
	url = https://gist.github.com/unixfreaxjp/7b8bd6be614f7a051fc9a9da760d3138
[submodule "articles/FastCashMalwareDissected"]
	path = articles/FastCashMalwareDissected
	url = https://github.com/fboldewin/FastCashMalwareDissected
[submodule "malware/pocs/saruman"]
	path = malware/pocs/saruman
	url = https://github.com/elfmaster/saruman
[submodule "malware/pocs/dt_infect"]
	path = malware/pocs/dt_infect
	url = https://github.com/elfmaster/dt_infect
[submodule "offensive/tools/egrets"]
	path = defensive/tools/egrets
	url = https://github.com/ancat/egrets
[submodule "malware/pocs/Diamorphine"]
	path = malware/pocs/Diamorphine
	url = https://github.com/m0nad/Diamorphine
[submodule "offensive/tools/CoolerVoid-casper-fs"]
	path = offensive/tools/CoolerVoid-casper-fs
	url = https://github.com/timb-machine-mirrors/CoolerVoid-casper-fs
[submodule "offensive/tools/ebpf-samples"]
	path = offensive/tools/ebpf-samples
	url = https://github.com/vbpf/ebpf-samples
[submodule "defensive/techniques/obscure-forensics"]
	path = defensive/techniques/obscure-forensics
	url = https://github.com/timb-machine/obscure-forensics
[submodule "defensive/tools/unix_collector"]
	path = defensive/tools/unix_collector
	url = https://github.com/op7ic/unix_collector
[submodule "defensive/techniques/BSidesRoc2022_Linux_Malware_Analysis_Course"]
	path = defensive/techniques/BSidesRoc2022_Linux_Malware_Analysis_Course
	url = https://github.com/archcloudlabs/BSidesRoc2022_Linux_Malware_Analysis_Course
[submodule "malware/pocs/backdoros"]
	path = malware/pocs/backdoros
	url = https://github.com/SafeBreach-Labs/backdoros
[submodule "malware/pocs/ebpfkit"]
	path = malware/pocs/ebpfkit
	url = https://github.com/Gui774ume/ebpfkit
[submodule "malware/source/mig-logcleaner-resurrected"]
	path = malware/source/mig-logcleaner-resurrected
	url = https://github.com/Kabot/mig-logcleaner-resurrected
[submodule "defensive/tools/avu32"]
	path = defensive/tools/avu32
	url = https://github.com/elfmaster/avu32
[submodule "defensive/tools/kernel-event-collector-module"]
	path = defensive/tools/kernel-event-collector-module
	url = https://github.com/vmware/kernel-event-collector-module
[submodule "malware/pocs/boopkit"]
	path = malware/pocs/boopkit
	url = https://github.com/kris-nova/boopkit
[submodule "malware/pocs/DDexec"]
	path = malware/pocs/DDexec
	url = https://github.com/arget13/DDexec
[submodule "malware/pocs/kprobe_rootkit"]
	path = malware/pocs/kprobe_rootkit
	url = https://github.com/elfmaster/kprobe_rootkit
[submodule "malware/pocs/skeksi_virus"]
	path = malware/pocs/skeksi_virus
	url = https://github.com/elfmaster/skeksi_virus
[submodule "offensive/techniques/scop_virus_paper"]
	path = offensive/techniques/scop_virus_paper
	url = https://github.com/elfmaster/scop_virus_paper
[submodule "defensive/tools/bpfdoor-scanner"]
	path = defensive/tools/bpfdoor-scanner
	url = https://github.com/snapattack/bpfdoor-scanner
[submodule "defensive/techniques/threat-matrix-cicd"]
	path = defensive/techniques/threat-matrix-cicd
	url = https://github.com/rung/threat-matrix-cicd
[submodule "defensive/tools/louis"]
	path = defensive/tools/louis
	url = https://github.com/sourque/louis
[submodule "defensive/tools/falco"]
	path = defensive/tools/falco
	url = https://github.com/falcosecurity/falco
[submodule "malware/pocs/ELFLoader"]
	path = malware/pocs/ELFLoader
	url = https://github.com/trustedsec/ELFLoader
[submodule "malware/pocs/binfmt_misc"]
	path = malware/pocs/binfmt_misc
	url = https://github.com/toffan/binfmt_misc
[submodule "malware/pocs/degu-lib"]
	path = malware/pocs/degu-lib
	url = https://github.com/io-tl/degu-lib
[submodule "malware/binaries/bootkit-samples"]
	path = malware/binaries/bootkit-samples
	url = https://github.com/hardenedvault/bootkit-samples
[submodule "offensive/techniques/awesome-linux-rootkits"]
	path = offensive/techniques/awesome-linux-rootkits
	url = https://github.com/milabs/awesome-linux-rootkits
[submodule "malware/binaries/KinSing"]
	path = malware/binaries/KinSing
	url = https://github.com/Caprico1/kinsing
[submodule "malware/pocs/Offensive-BPF"]
	path = malware/pocs/Offensive-BPF
	url = https://github.com/wunderwuzzi23/Offensive-BPF
[submodule "malware/pocs/TripleCross"]
	path = malware/pocs/TripleCross
	url = https://github.com/h3xduck/TripleCross
[submodule "malware/pocs/pamspy"]
	path = malware/pocs/pamspy
	url = https://github.com/citronneur/pamspy
[submodule "malware/pocs/adore-ng"]
	path = malware/pocs/adore-ng
	url = https://github.com/yaoyumeng/adore-ng
[submodule "malware/pocs/enyelkm"]
	path = malware/pocs/enyelkm
	url = https://github.com/therealdreg/enyelkm
[submodule "malware/pocs/bad_UDP"]
	path = malware/pocs/bad_UDP
	url = https://github.com/schrodyn/bad_UDP
[submodule "offensive/tools/netkat"]
	path = offensive/tools/netkat
	url = https://github.com/aojea/netkat
[submodule "offensive/tools/patchelf"]
	path = offensive/tools/patchelf
	url = https://github.com/NixOS/patchelf
[submodule "defensive/tools/ebpfkit-monitor"]
	path = defensive/tools/ebpfkit-monitor
	url = https://github.com/Gui774ume/ebpfkit-monitor
[submodule "defensive/tools/LEAF"]
	path = defensive/tools/LEAF
	url = https://github.com/alex-cart/LEAF
[submodule "malware/pocs/rooty"]
	path = malware/pocs/rooty
	url = https://github.com/jermeyyy/rooty
[submodule "offensive/techniques/timb-machine-PID-theft"]
	path = offensive/techniques/timb-machine-PID-theft
	url = https://gist.github.com/timb-machine/6177721c3eafba3e95abdf112b2a5902
[submodule "offensive/tools/dlinject"]
	path = offensive/tools/dlinject
	url = https://github.com/DavidBuchanan314/dlinject
[submodule "offensive/tools/tsh"]
	path = offensive/tools/tsh
	url = https://github.com/creaktive/tsh
[submodule "malware/pocs/GonnaCry"]
	path = malware/pocs/GonnaCry
	url = https://github.com/tarcisio-marinho/GonnaCry
[submodule "offensive/tools/Mara"]
	path = offensive/tools/Mara
	url = https://github.com/io-tl/Mara
[submodule "malware/pocs/suterusu"]
	path = malware/pocs/suterusu
	url = https://github.com/mncoppola/suterusu
[submodule "defensive/tools/ebpf-process-anomaly-detection"]
	path = defensive/tools/ebpf-process-anomaly-detection
	url = https://github.com/evilsocket/ebpf-process-anomaly-detection
[submodule "defensive/tools/krie"]
	path = defensive/tools/krie
	url = https://github.com/Gui774ume/krie
[submodule "offensive/tools/maya"]
	path = offensive/tools/maya
	url = https://github.com/elfmaster/maya
[submodule "malware/binaries/Earthwrom/EarthWorm"]
	path = malware/binaries/Earthwrom/EarthWorm
	url = https://github.com/rootkiter/EarthWorm
[submodule "malware/binaries/Earthwrom/Binary-Files"]
	path = malware/binaries/Earthwrom/Binary-Files
	url = https://github.com/rootkiter/Binary-Files
[submodule "offensive/tools/swap_digger"]
	path = offensive/tools/swap_digger
	url = https://github.com/sevagas/swap_digger
[submodule "defensive/tools/Hades"]
	path = defensive/tools/Hades
	url = https://github.com/chriskaliX/Hades
[submodule "offensive/tools/KCMTicketFormatter"]
	path = offensive/tools/KCMTicketFormatter
	url = https://github.com/blacklanternsecurity/KCMTicketFormatter
[submodule "offensive/tools/SSSDKCMExtractor"]
	path = offensive/tools/SSSDKCMExtractor
	url = https://github.com/fireeye/SSSDKCMExtractor
[submodule "offensive/tools/sloader"]
	path = offensive/tools/sloader
	url = https://github.com/akawashiro/sloader
[submodule "malware/binaries/malware_samples"]
	path = malware/binaries/malware_samples
	url = https://github.com/darrenmartyn/malware_samples
[submodule "malware/source/Jynx2"]
	path = malware/source/Jynx2
	url = https://github.com/chokepoint/Jynx2
[submodule "offensive/tools/SSH-Key-Brute-Forcer"]
	path = offensive/tools/SSH-Key-Brute-Forcer
	url = https://github.com/metac0rtex/SSH-Key-Brute-Forcer
[submodule "malware/source/fscan"]
	path = malware/source/fscan
	url = https://github.com/shadow1ng/fscan
[submodule "malware/binaries/Sysrv-Hello/samples"]
	path = malware/binaries/Sysrv-Hello/samples
	url = https://github.com/accuknox/samples
[submodule "offensive/tools/merlin"]
	path = offensive/tools/merlin
	url = https://github.com/Ne0nd0g/merlin
[submodule "offensive/tools/truffleproc"]
	path = offensive/tools/truffleproc
	url = https://github.com/controlplaneio/truffleproc
[submodule "offensive/tools/monomorph"]
	path = offensive/tools/monomorph
	url = https://github.com/DavidBuchanan314/monomorph
[submodule "offensive/techniques/ssh-badkeys"]
	path = offensive/techniques/ssh-badkeys
	url = https://github.com/rapid7/ssh-badkeys
[submodule "offensive/techniques/timb-machine-messing-with-slash-proc"]
	path = offensive/techniques/timb-machine-messing-with-slash-proc
	url = https://gist.github.com/timb-machine/602d1a4dace4899babc1b6b5345d24b2
[submodule "defensive/tools/upx-recovery-tool"]
	path = defensive/tools/upx-recovery-tool
	url = https://github.com/NozomiNetworks/upx-recovery-tool
[submodule "defensive/techniques/Remote-Linux-Triage-Collection-using-OSquery"]
	path = defensive/techniques/Remote-Linux-Triage-Collection-using-OSquery
	url = https://github.com/anelshaer/Remote-Linux-Triage-Collection-using-OSquery
[submodule "articles/akamai-security-research"]
	path = articles/akamai-security-research
	url = https://github.com/akamai/akamai-security-research
[submodule "defensive/tools/bpfdoor-client-fwbypass"]
	path = defensive/tools/bpfdoor-client-fwbypass
	url = https://gist.github.com/EvergreenCartoons/6c223e8f43e2fa4dc11c1c0a6118cbac
[submodule "defensive/tools/bpfdoorkicker"]
	path = defensive/tools/bpfdoorkicker
	url = https://gist.github.com/EvergreenCartoons/51d7529eeb9191880beb8890cf9b1ace
[submodule "defensive/yara/Neo23x0-signature-base"]
	path = defensive/yara/Neo23x0-signature-base
	url = https://github.com/Neo23x0/signature-base
[submodule "defensive/tools/osquery-defense-kit"]
	path = defensive/tools/osquery-defense-kit
	url = https://github.com/chainguard-dev/osquery-defense-kit
[submodule "offensive/tools/injectso"]
	path = offensive/tools/injectso
	url = https://github.com/stealth/injectso
[submodule "defensive/tools/uac"]
	path = defensive/tools/uac
	url = https://github.com/tclahr/uac
[submodule "offensive/tools/Sandman"]
	path = offensive/tools/Sandman
	url = https://github.com/Idov31/Sandman
[submodule "defensive/tools/laurel"]
	path = defensive/tools/laurel
	url = https://github.com/threathunters-io/laurel
[submodule "offensive/tools/ermir"]
	path = offensive/tools/ermir
	url = https://github.com/hakivvi/ermir
[submodule "offensive/tools/siphon"]
	path = offensive/tools/siphon
	url = https://github.com/liamg/siphon
[submodule "offensive/tools/Villain"]
	path = offensive/tools/Villain
	url = https://github.com/t3l3machus/Villain
[submodule "defensive/tools/seccomp-tools"]
	path = defensive/tools/seccomp-tools
	url = https://github.com/david942j/seccomp-tools
[submodule "offensive/tools/memrun"]
	path = offensive/tools/memrun
	url = https://github.com/guitmz/memrun
[submodule "defensive/tools/LSMS"]
	path = defensive/tools/LSMS
	url = https://github.com/sqall01/LSMS
[submodule "defensive/tools/modreveal"]
	path = defensive/tools/modreveal
	url = https://github.com/jafarlihi/modreveal
[submodule "malware/pocs/apinject"]
	path = malware/pocs/apinject
	url = https://github.com/alexander-pick/apinject
[submodule "malware/pocs/memdlopen-lib"]
	path = malware/pocs/memdlopen-lib
	url = https://github.com/X-C3LL/memdlopen-lib
[submodule "malware/pocs/Father"]
	path = malware/pocs/Father
	url = https://github.com/mav8557/Father
[submodule "malware/pocs/jdbc-backdoor"]
	path = malware/pocs/jdbc-backdoor
	url = https://github.com/airman604/jdbc-backdoor
[submodule "offensive/tools/linux_injector"]
	path = offensive/tools/linux_injector
	url = https://github.com/namazso/linux_injector
[submodule "offensive/tools/sshkey-grab"]
	path = offensive/tools/sshkey-grab
	url = https://github.com/NetSPI/sshkey-grab
[submodule "malware/pocs/sar5430-coolkid"]
	path = malware/pocs/sar5430-coolkid
	url = https://github.com/timb-machine-mirrors/sar5430-coolkid
[submodule "malware/pocs/lkm-rootkit"]
	path = malware/pocs/lkm-rootkit
	url = https://github.com/croemheld/lkm-rootkit
[submodule "defensive/techniques/rtk-eLibrary"]
	path = defensive/techniques/rtk-eLibrary
	url = https://github.com/DevinRTK/rtk-eLibrary
[submodule "defensive/tools/sandfly-file-decloak"]
	path = defensive/tools/sandfly-file-decloak
	url = https://github.com/sandflysecurity/sandfly-file-decloak
[submodule "defensive/tools/sandfly-processdecloak"]
	path = defensive/tools/sandfly-processdecloak
	url = https://github.com/sandflysecurity/sandfly-processdecloak
[submodule "defensive/tools/sandfly-entropyscan"]
	path = defensive/tools/sandfly-entropyscan
	url = https://github.com/sandflysecurity/sandfly-entropyscan
[submodule "offensive/tools/Pyramid"]
	path = offensive/tools/Pyramid
	url = https://github.com/naksyn/Pyramid
[submodule "offensive/tools/kmod"]
	path = offensive/tools/kmod
	url = https://github.com/pmorjan/kmod
[submodule "offensive/tools/DeimosC2"]
	path = offensive/tools/DeimosC2
	url = https://github.com/DeimosC2/DeimosC2
[submodule "offensive/techniques/royra-ssh-login-attempts-usernames"]
	path = offensive/techniques/royra-ssh-login-attempts-usernames
	url = https://gist.github.com/royra/35952b7bb1217e482a24d427848eefc2
[submodule "defensive/tools/impelf"]
	path = defensive/tools/impelf
	url = https://github.com/signalblur/impelf
[submodule "defensive/tools/SysmonForLinux"]
	path = defensive/tools/SysmonForLinux
	url = https://github.com/Sysinternals/SysmonForLinux
[submodule "malware/pocs/go-liora"]
	path = malware/pocs/go-liora
	url = https://github.com/guitmz/go-liora
[submodule "malware/pocs/midrashim"]
	path = malware/pocs/midrashim
	url = https://github.com/guitmz/midrashim
[submodule "malware/pocs/puszek-rootkit"]
	path = malware/pocs/puszek-rootkit
	url = https://github.com/Eterna1/puszek-rootkit
[submodule "malware/pocs/reveng_rtkit"]
	path = malware/pocs/reveng_rtkit
	url = https://github.com/reveng007/reveng_rtkit
[submodule "malware/pocs/rkduck"]
	path = malware/pocs/rkduck
	url = https://github.com/QuokkaLight/rkduck
[submodule "malware/pocs/Umbra"]
	path = malware/pocs/Umbra
	url = https://github.com/h3xduck/Umbra
[submodule "defensive/tools/ChopChopGo"]
	path = defensive/tools/ChopChopGo
	url = https://github.com/M00NLIG7/ChopChopGo
[submodule "defensive/tools/NoCrypt"]
	path = defensive/tools/NoCrypt
	url = https://github.com/niveb/NoCrypt
[submodule "offensive/tools/ssh-key-backdoor"]
	path = offensive/tools/ssh-key-backdoor
	url = https://github.com/hackerschoice/ssh-key-backdoor
[submodule "malware/pocs/fbkit"]
	path = malware/pocs/fbkit
	url = https://github.com/noptrix/fbkit
[submodule "malware/source/morris-worm"]
	path = malware/source/morris-worm
	url = https://github.com/arialdomartini/morris-worm
[submodule "offensive/tools/nbutools"]
	path = offensive/tools/nbutools
	url = https://github.com/airbus-seclab/nbutools
[submodule "offensive/tools/xkbcat"]
	path = offensive/tools/xkbcat
	url = https://github.com/anko/xkbcat
[submodule "offensive/tools/traitor"]
	path = offensive/tools/traitor
	url = https://github.com/liamg/traitor
[submodule "defensive/tools/ebpfguard"]
	path = defensive/tools/ebpfguard
	url = https://github.com/deepfence/ebpfguard
[submodule "defensive/tools/Qu1cksc0pe"]
	path = defensive/tools/Qu1cksc0pe
	url = https://github.com/CYB3RMX/Qu1cksc0pe
[submodule "offensive/tools/ligolo-ng"]
	path = offensive/tools/ligolo-ng
	url = https://github.com/nicocha30/ligolo-ng
[submodule "malware/source/ziggystartux"]
	path = malware/source/ziggystartux
	url = https://github.com/isdrupter/ziggystartux
[submodule "offensive/tools/passe-partout"]
	path = offensive/tools/passe-partout
	url = https://github.com/aviat/passe-partout
[submodule "malware/source/ChriSanders22-CVE-2023-35829-poc"]
	path = malware/source/ChriSanders22-CVE-2023-35829-poc
	url = https://github.com/timb-machine-mirrors/ChriSanders22-CVE-2023-35829-poc
[submodule "defensive/techniques/awesome-linux-attack-forensics-purplelabs"]
	path = defensive/techniques/awesome-linux-attack-forensics-purplelabs
	url = https://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs
[submodule "offensive/tools/pakkero"]
	path = offensive/tools/pakkero
	url = https://github.com/89luca89/pakkero
[submodule "defensive/tools/vmlinux-to-elf"]
	path = defensive/tools/vmlinux-to-elf
	url = https://github.com/marin-m/vmlinux-to-elf
[submodule "malware/pocs/apollon"]
	path = malware/pocs/apollon
	url = https://github.com/codewhitesec/apollon
[submodule "malware/pocs/vx"]
	path = malware/pocs/vx
	url = https://github.com/ilv/vx
[submodule "defensive/tools/linuxevents"]
	path = defensive/tools/linuxevents
	url = https://github.com/trailofbits/linuxevents
[submodule "defensive/tools/ebpfpub"]
	path = defensive/tools/ebpfpub
	url = https://github.com/trailofbits/ebpfpub
[submodule "defensive/tools/ebpf-common"]
	path = defensive/tools/ebpf-common
	url = https://github.com/trailofbits/ebpf-common
[submodule "defensive/tools/ved-ebpf"]
	path = defensive/tools/ved-ebpf
	url = https://github.com/hardenedvault/ved-ebpf
[submodule "offensive/tools/stelf-loader"]
	path = offensive/tools/stelf-loader
	url = https://github.com/DavidBuchanan314/stelf-loader
[submodule "malware/pocs/daphne"]
	path = malware/pocs/daphne
	url = https://github.com/codewhitesec/daphne
[submodule "defensive/tools/kunai"]
	path = defensive/tools/kunai
	url = https://github.com/0xrawsec/kunai
[submodule "defensive/tools/secimport"]
	path = defensive/tools/secimport
	url = https://github.com/avilum/secimport
[submodule "offensive/techniques/debugoff"]
	path = offensive/techniques/debugoff
	url = https://github.com/0xor0ne/debugoff
[submodule "malware/binaries/Spirit/spirit"]
	path = malware/binaries/Spirit/spirit
	url = https://github.com/AngelGuyu/spirit
[submodule "malware/binaries/malware-menagerie"]
	path = malware/binaries/malware-menagerie
	url = https://github.com/tstromberg/malware-menagerie
[submodule "defensive/tools/sunlight"]
	path = defensive/tools/sunlight
	url = https://github.com/tstromberg/sunlight
[submodule "offensive/tools/zombieant"]
	path = offensive/tools/zombieant
	url = https://github.com/dsnezhkov/zombieant
[submodule "malware/pocs/SSH-Snake"]
	path = malware/pocs/SSH-Snake
	url = https://github.com/MegaManSec/SSH-Snake
[submodule "malware/pocs/Silent_Packer"]
	path = malware/pocs/Silent_Packer
	url = https://github.com/SilentVoid13/Silent_Packer
[submodule "malware/pocs/d0zer"]
	path = malware/pocs/d0zer
	url = https://github.com/sad0p/d0zer
[submodule "offensive/tools/bpf-keylogger"]
	path = offensive/tools/bpf-keylogger
	url = https://github.com/SkyperTHC/bpf-keylogger
[submodule "articles/I-S00N"]
	path = articles/I-S00N
	url = https://github.com/mttaggart/I-S00N
[submodule "defensive/tools/fim"]
	path = defensive/tools/fim
	url = https://github.com/Achiefs/fim
[submodule "malware/pocs/brokepkg"]
	path = malware/pocs/brokepkg
	url = https://github.com/R3tr074/brokepkg
[submodule "malware/source/libprocesshider"]
	path = malware/source/libprocesshider
	url = https://github.com/gianlucaborello/libprocesshider
[submodule "offensive/tools/nysm"]
	path = offensive/tools/nysm
	url = https://github.com/eeriedusk/nysm
[submodule "defensive/tools/ELFEN"]
	path = defensive/tools/ELFEN
	url = https://github.com/nikhilh-20/ELFEN
[submodule "offensive/tools/GTFONow"]
	path = offensive/tools/GTFONow
	url = https://github.com/Frissi0n/GTFONow
[submodule "offensive/tools/D3m0n1z3dShell"]
	path = offensive/tools/D3m0n1z3dShell
	url = https://github.com/MatheuZSecurity/D3m0n1z3dShell
[submodule "malware/source/junkcode"]
	path = malware/source/junkcode
	url = https://github.com/chenkaie/junkcode
[submodule "offensive/tools/LazyOwn"]
	path = offensive/tools/LazyOwn
	url = https://github.com/grisuno/LazyOwn