gtworek

ghidra

Ghidra is a software reverse engineering (SRE) framework

wttr.in

:partly_sunny: The right way to check the weather

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

pdfs

Technically-oriented PDF Collection (Papers, Specs, Decks, Manuals, etc)

dnSpy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

fibratus

A modern tool for Windows kernel exploration and tracing with a focus on security

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

tinycc

Unofficial mirror of mob development branch

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

SysmonForLinux

Hacking-Windows

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

exe_to_dll

Converts a EXE into DLL

wtfis

Passive hostname, domain and IP lookup tool for non-robots

PrivFu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

RDPassSpray

Python3 tool to perform password spraying using RDP

hardening

Repository of Hardening Guides

xntsv

XNTSV program for detailed viewing of system structures for Windows.

PEExplorerV2

Portable Executable Explorer version 2

WinDbg_Scripts

Useful scripts for WinDbg using the debugger data model

MSRC-Microsoft-Security-Updates-API

Repo with getting started projects for the Microsoft Security Updates API (msrc.microsoft.com/update-guide)

RdpCacheStitcher

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

Neton

Neton is a tool for getting information from Internet connected sandboxes

dpapi-ng

Python DPAPI NG Decryptor for non-Windows Platforms

Bloodhound-Portable

Bloodhound Portable for Windows

CallbackObjectAnalyzer

Dumps information about all the callback objects found in a dump file and the functions registered for them

HelpdeskPowershellScripts

Scripts which can be used in helpdesk to automate job

pstools-rust

PSADAudit

eN-Lib

PowerShell tools

DFIR

Wykłady stworzone z myślą o studentach Politechniki Opolskiej (Wykrywanie i reagowanie na incydenty bezpieczeństwa).