Beast code in Giters

init-chaos's starred repositories

pe_tree

Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.

Language:PythonApache-2.0130000

Procmon is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows. Procmon provides a convenient and efficient way for Linux developers to trace the syscall activity on the system.

Language:C++MIT391700

capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

Apache-2.050800

capa

The FLARE team's open-source tool to identify capabilities in executable files.

Language:PythonApache-2.0401100

openc2-json-schema

An open-source JSON-Schema validator test suite and command-line tool for OpenC2

Language:KotlinApache-2.0500

BLUESPAWN

An Active Defense and EDR software to empower Blue Teams

Language:C++GPL-3.0122000

volatility

An advanced memory forensics framework

Language:PythonGPL-2.0706400

tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

Language:JavaApache-2.086100

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Language:JavaApache-2.0817100

SharpRDPHijack

A POC Remote Desktop (RDP) session hijack utility for disconnected sessions

Language:C#BSD-3-Clause41300

Phishing-Site-Detection

Python Codes for Detecting Phishing Sites

Language:Python100

youtube-dl

Command-line program to download videos from YouTube.com and other video sites

Language:PythonUnlicense13008200

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Language:ShellGPL-3.01282200

vmcloak

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.

Language:Python47800

CuckooSploit

An environment for comprehensive, automated analysis of web-based exploits, based on Cuckoo sandbox.

Language:PythonGPL-3.012600

cuckoo-modified

Modified edition of cuckoo

Language:Python39200

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

Language:JavaScriptNOASSERTION547400

powershell-securestring-decoder

A simple, pure JavaScript implementation decoding PowerShell's SecureString objects for analysis.

Language:HTMLGPL-3.02400

PyPowerShellXray

Python script to decode common encoded PowerShell scripts

Language:Python21500

PowerDrive

A tool for de-obfuscating PowerShell scripts

Language:PowerShellGPL-3.06400

lisa

Sandbox for automated Linux malware analysis.

Language:PythonApache-2.047600

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

Language:HTMLMIT457000

BoomBox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

Language:PowerShellMPL-2.023000

viper

Binary analysis and management framework

Language:PythonNOASSERTION153400

ProcDump-for-Linux

A Linux version of the ProcDump Sysinternals tool

Language:CMIT291100

pyinfra

pyinfra turns Python code into shell commands and runs them on your servers. Execute ad-hoc commands and write declarative operations. Target SSH servers, local machine and Docker containers. Fast and scales from one server to thousands.

Language:PythonMIT371800

IRtools

The aim of this repository is to provide a list of examples of tools, sources and measures available to incident response teams

5800

volatility3

Volatility 3.0 development

Language:PythonNOASSERTION239900

MDATP

Microsoft Defender XDR - Resource Hub

Language:PowerShellMIT45500

Adaz

:wrench: Deploy customizable Active Directory labs in Azure - automatically.

Language:HCL40300