ashemery

Ali Hadi's starred repositories

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Language:PythonNOASSERTION10836 814 154

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

Language:JavaScriptNOASSERTION5447 437 2392

qiling

A True Instrumentable Binary Emulation Framework

Language:PythonGPL-2.04904 134 520

timesketch

Collaborative forensic timeline analysis

Language:PythonApache-2.02516 137 1303

EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

Language:HTMLGPL-3.02147 144 11

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

Language:PythonApache-2.02063 90 75

malcom

Malcom - Malware Communications Analyzer

Language:PythonNOASSERTION1143 132 42

docker-hadoop-spark-workbench

[EXPERIMENTAL] This repo includes deployment instructions for running HDFS/Spark inside docker containers. Also includes spark-notebook and HDFS FileBrowser.

Language:Makefile678 40 60

wireguard-operator

Painless deployment of wireguard on kubernetes

Language:GoMIT585 11 38

httpdump

Capture and parse http traffics

Language:GoBSD-2-Clause574 410

SubSeven

SubSeven Legacy Official Source Code Repository

Language:PascalApache-2.0526 25 3

zat

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

Language:Jupyter NotebookMIT419 40 73

course

Slides, figures, and other material for teaching using tracing and observability on FreeBSD

Language:TeXNOASSERTION377 75 2

CDQR

The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices

Language:PythonGPL-3.0329 30 26

LEAF

Linux Evidence Acquisition Framework

Language:Python113 9 1

UYR

Under Your Radar (UYR): Exfiltration using Steganography

Language:PythonGPL-2.01600

ICTCS-Big-Data

Materials for ICTCS'2017 "Lowering the Barriers to Big Data Solutions" Workshop.

5 10

winapi

Different Windows API Tests

Language:C4 20

flowvis

visualize netflows using t-SNE

Language:JavaScriptApache-2.03 30