colindix

scripts

cvemap

Navigate the CVE jungle with ease.

MasterParser

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

owa-honeypot

A basic flask based Outlook Web Honey pot

Pentest-Tools-Collection

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

vt-py

The official Python 3 client library for VirusTotal

signator-rules

Collection of rules created using YARA-Signator over Malpedia

Open-Source-YARA-rules

YARA Rules I come across on the internet

VMwareCloak

A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

python-evtx

Pure Python parser for Windows Event Log files (.evtx)

zphisher

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

fraud-bridge

ICMP and DNS tunneling via IPv4 and IPv6

GPRegistryPolicyParser

passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

go-dnscollector

Ingesting, pipelining, and enhancing your DNS logs with usage indicators, security analysis, and additional metadata.

Anydesk_Forensics

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Malware

velociraptor-docker

Docker image for Velocidex Velociraptor

Adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

AutoLLR

Script to automate Linux live evidence collection

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ActionPacks

Public PowerShell script gallery for ScriptRunner.

Public-Intelligence-Feeds

Standard-Format Threat Intelligence Feeds

malware-samples

Malware samples, analysis exercises and other interesting resources.

gophish

Open-Source Phishing Toolkit