ohw0rd

dfirtrack

DFIRTrack - The Incident Response Tracking Application

sshfs-win

SSHFS For Windows

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

bashbunny-payloads

The Official Bash Bunny Payload Repository

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

malware_analysis

Various snippets created during malware analysis

eqllib

Litmus_Test

Detecting ATT&CK techniques & tactics for Linux

JumpList

Skadi

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

portspoof

Portspoof

HELK

The Hunting ELK

OrcaMDF

A C# parser for MDF files. Allows you to read tables, metadata and indexes from MDF files without it being attached to a running SQL Server instance.

dfirtriage

Digital forensic acquisition tool for Windows based incident response.

terminal

The new Windows Terminal and the original Windows console host, all in the same place!

Vulmap

Vulmap Online Local Vulnerability Scanners Project

ascii-emoji

Essential Emoji

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

Invoke-PSImage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

Empire

Empire is a PowerShell and Python post-exploitation agent.

Dshell

Dshell is a network forensic analysis framework.

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

1337-Noms-The-Hacker-Cookbook

food food food

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

A-journey-into-Radare2

A series of tutorials about radare2 framework from https://www.megabeets.net

DNSlivery

Easy files and payloads delivery over DNS

Lime-RAT

LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)

FCL

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

packetTrail

Associates netflow data with system processes and logs to syslog

graphqldesigner.com

A developer web-app tool to rapidly prototype a full stack implementation of GraphQL with React.