Beast code in Giters

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

Language:PythonMIT6495 70 82

awesome-forensics

A curated list of awesome forensic analysis tools and resources

CC0-1.03754 169 10

LLM4Decompile

Reverse Engineering: Decompiling Binary Code with Large Language Models

Language:PythonMIT2824 31 18

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

Language:RustGPL-3.02655 51 91

Invoke-PSImage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

Language:PowerShellMIT2153 101 19

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Language:RustGPL-3.02110 39 612

Nidhogg

Nidhogg is an all-in-one simple to use rootkit.

Language:C++GPL-3.01679 32 15

Kansa

A Powershell incident response framework

Language:PowerShellApache-2.01537 142 114

try-convert

Helping .NET developers port their projects to .NET Core!

Language:C#MIT1140 49 139

red-team-scripts

A collection of Red Team focused tools, scripts, and notes

Language:PowerShellBSD-3-Clause1104 53 1

Sandman

Sandman is a NTP based backdoor for red team engagements in hardened networks.

Language:C#GPL-3.0697 13 2

FunctionStomping

Shellcode injection technique. Given as C++ header, standalone Rust program or library.

Language:RustGPL-3.0682 18 8

moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Language:C++GPL-3.0642 12 2

SharpNoPSExec

Get file less command execution for lateral movement.

Language:C#GPL-3.0593 12 1

DirtyCred

Kernel exploitation technique

Language:LLVM564 26 1

lucid

An Interactive Hex-Rays Microcode Explorer

Language:PythonMIT515 21 4

SharpSniper

Find specific users in active directory via their username and logon IP address

Language:C#375 11 3

pdbparse

Python code to parse Microsoft PDB files

Language:PythonNOASSERTION304 21 43

Flare-On-Challenges

This repo is aim to compile all Flare-On challenge's binaries. Update: 2014 -2022.

287 13 2

MrKaplan

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

Language:PowerShellGPL-3.0249 13 1

VolExp

volatility explorer

Language:PythonGPL-3.090 7 1

Vol3xp

Volatility Explorer Suit

Language:Python60 3 2

UdpInspector

Listing UDP connections with remote address without sniffing.

Language:C++GPL-3.029 4 1

WpfSearchAndHighlightText

Search and highlight text in wpf (Rich Text Box)

Language:C#401