Ralphhorn

dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

bzar

A set of Zeek scripts to detect ATT&CK techniques.

SIGMA-detection-rules

Set of SIGMA rules (>320) mapped to MITRE ATT&CK tactic and techniques

C2IntelFeeds

Automatically created C2 Feeds

reversinglabs-yara-rules

ReversingLabs YARA Rules

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

MemProcFS

MemProcFS

DFIRArtifactMuseum

The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact validation processes as well as increase access to artifacts that may no longer be readily available anymore.

threat-intel

Signatures and IoCs from public Volexity blog posts.

PyOxidizer

A modern Python application packaging and distribution tool

mimipenguin

A tool to dump the login password from the current linux user

CrackMapExec

A swiss army knife for pentesting networks

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

MemLabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Dotfiles

My personal dotfiles for bspwm, i3-gaps and kde plasma

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

Name-That-Hash

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

sliver

Adversary Emulation Framework

misp-training

MISP trainings, threat intel and information sharing training materials with source code

DeepBlueCLI

MISP2ArcSight

Tool to send MISP attributes to ArcSight ESM Active Lists.

OSCP-Exam-Report-Template-Markdown

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

SecCertRoadmapHTML

Security Certification Roadmap HTML5/CSS3 version

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

pwncat

Fancy reverse and bind shell handler

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

dnscat2

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication