nprigent

followers

following

stars

Nicolas 'Neeko' Prigent's starred repositories

markdown-here

Google Chrome, Firefox, and Thunderbird extension that lets you write email in Markdown and render it before sending.

Language:JavaScriptMIT59577 1030 614

viper

Go configuration with fangs

Language:GoMIT26382 248 860

crystal

The Crystal Programming Language

Language:CrystalApache-2.019219 421 7436

bashtop

Linux/OSX/FreeBSD resource monitor

Language:ShellApache-2.010704 165 191

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Language:PythonNOASSERTION10051 248 283

BloodHound

Six Degrees of Domain Admin

Language:PowerShellGPL-3.09588 377 508

FreshRSS

A free, self-hostable news aggregator…

Language:PHPAGPL-3.08955 102 3211

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Language:PowerShellNOASSERTION8516 394 59

sysmon-modular

A repository of sysmon configuration modules

Language:PowerShellMIT2570 165 98

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

Language:PowerShellGPL-3.01952 49 7

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

Language:Assembly1900 158 20

Diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Language:CNOASSERTION1744 55 33

LiME

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

Language:CGPL-2.01664 81 90

Kansa

A Powershell incident response framework

Language:PowerShellApache-2.01533 142 114

Shuffle

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

Language:ShellAGPL-3.01352 36 999

Aurora-Incident-Response

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

Language:JavaScriptApache-2.0742 42 76

atc-react

A knowledge base of actionable Incident Response techniques

Language:PythonApache-2.0594 34 220

Circlean

USB key cleaner

Language:PythonBSD-3-Clause443 45 62

profiles

Volatility profiles for Linux and Mac OS X

Language:Python320 45 43

glm-ucode

GLM uCode dumps

fuse4js

FUSE bindings for Javascript and node.js

Language:JavaScriptNOASSERTION263 23 21

CortexDocs

Documentation of Cortex

AGPL-3.0171 24 45

LiMEaide

A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.

Language:PythonGPL-3.0160 14 35

dissect.cobaltstrike

Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles

Language:PythonMIT145 11 2

rulesfinder

Machine-learn password mangling rules

Language:Rust106 10 8

Log4j_Detector

Detection of Log4j in memory

Language:YARA40 5 2

threadmap

threadmap plugin for Volatility Foundation

Language:PythonGPL-3.027 40

yara-rules

Repository of own YARA rules

Language:YARA7 30

sysmon-config

https://github.com/Swiftonsecurity/sysmon-config

600

iphrestore

Restore pictures and videos from iPhone backup

Language:Python500