LeanVel

rclone

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Awesome-GPT-Agents

A curated list of GPT agents for cybersecurity

qiling

A True Instrumentable Binary Emulation Framework

capa

The FLARE team's open-source tool to identify capabilities in executable files.

rules

Repository of yara rules

red_team_tool_countermeasures

DidierStevensSuite

Please no pull requests for this repository. Thanks!

msticpy

Microsoft Threat Intelligence Security Tools

CobaltStrike

CobaltStrike's source code

lessmsi

A tool to view and extract the contents of an Windows Installer (.msi) file.

vivisect

reversinglabs-yara-rules

ReversingLabs YARA Rules

nordvpn

NordVpn Docker Client

hassh

HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.

capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

Open-Source-YARA-rules

YARA Rules I come across on the internet

streamingphish

Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.

certstream-server

Certificate Transparency Log aggregation, parsing, and streaming service written in Elixir

what_is_this_c2

For all these times you're asking yourself "what is this panel again?"

APT34

APT34/OILRIG leak

Resources

Collection of resources that are made by the Malware Research community

Tools

Combination of different utilities, have fun!

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

GenAI-Security-Adventures

ratemyip-openframework

An Open framework to rate the exposure of ip addresses with services exposed to the internet

QuasarRAT-Analysis

QuasarRAT analysis tools and research report

microsoft

assemblyline-service-cape

Assemblyline service build for CAPE's API