perch-stu

C2-Tracker

Live Feed of C2 servers, tools, and botnets

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

infosec-jupyterthon

A community event for security researchers to share their favorite notebooks

JonMon

awesome-intelligence-writing

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

interactsh

An OOB interaction gathering server and client library

EHole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

skrapa

A zero dependency and customizable Python library for scanning Windows and Linux process memory.

trs

🔭 Threat report analysis via LLM and Vector DB

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

RMML

A list of RMMs designed to be used in automation to build alerts

BestEdrOfTheMarket

Little user-mode AV/EDR evasion lab for training & learning purposes

ezines

gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

GDBleed

Dynamic-Static binary instrumentation framework on top of GDB

tenzir

Open source security data pipelines.

suriwire

Wireshark plugin to display Suricata analysis info

arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

LdrLibraryEx

A small x64 library to load dll's into memory.

hermit

Actually Portable WebAssembly compiler toolchain for self-contained cross-platform binaries

emba

EMBA - The firmware security analyzer

FalconHound

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool.

ghidriff

Python Command-Line Ghidra Binary Diffing Engine

Nightmangle

sysmon-modular

A repository of sysmon configuration modules

mwcfg

A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck

binlex

A Binary Genetic Traits Lexer Framework

PortEx

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness