nrrpinto

f4d0's starred repositories

Process_Ghosting

Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by a file. This is an evasion technique.

Language:C++MIT1200

GhostTask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

Language:CMIT42900

aria2-onion-downloader

Download from .onion-domains faster.

Language:HTMLLGPL-2.113200

DarkGPT is an OSINT assistant based on GPT-4-200K (recommended use) designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes.

Language:Python182200

NetExec

The Network Execution Tool

Language:PythonBSD-2-Clause246400

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Language:CAGPL-3.02283500

country-ip-blocks

CIDR country-level IP data, straight from the Regional Internet Registries, updated hourly. This is a read-only mirror.

CC0-1.065700

RecuperaBit

A tool for forensic file system reconstruction.

Language:PythonGPL-3.051400

reg_hunter

Blueteam operational triage registry hunting/forensic tool.

Language:RustMIT14200

python-registry

Pure Python parser for Windows Registry hives.

Language:PythonApache-2.042100

IntelArchitectureMap

Intelligence Architecture Mind Map

10700

linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Language:ShellMIT173600

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Language:PythonApache-2.0980800

katana

A next-generation crawling and spidering framework.

Language:GoMIT894500

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Language:PythonBSD-2-Clause292500

GOAD

game of active directory

Language:PowerShellGPL-3.0453100

breach-parse

A tool for parsing breached passwords

Language:Shell173900

hashes.org-list

Unique hashes.org "founds" sorted by occurrence. (November 2019)

MIT6500

MeshAgent

MeshAgent used along with MeshCentral to remotely manage computers. Many variations of the background management agent are included as binaries in the MeshCentral project.

Language:C19300

log4j-shell-poc

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

Language:PythonMIT176100

rmmagent

Tactical RMM Agent

Language:GoNOASSERTION11700

xmrig_setup

Auto setup scripts and pre-compiled xmr miner for moneroocean.stream pool

Language:Batchfile8700

tacticalrmm

A remote monitoring & management tool, built with Django, Vue and Go.

Language:PythonNOASSERTION288900

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

Language:PythonMIT134400

PPLinject

Inject unsigned DLL into Protected Process Light (PPL)

Language:CMIT1200

CrossInject

x86/x64 dll injector

Language:CGPL-3.02800

ransomwatch

the transparent ransomware claim tracker 🥷🏼🧅🖥️

Language:HTMLUnlicense79800

4n6_misc

Miscellaneous Scripts

Language:Python1700

Tools

Tools from WFA 4/e, timeline tools, etc.

Language:Perl13000

Azure-AD-Incident-Response-PowerShell-Module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

Language:PowerShellMIT40200