schrodyn

tshark_extractor

python wrapper to use tshark for file extraction from the command line.

anti-analysis-tricks

Bunch of techniques potentially used by malware to detect analysis environments

AntiDebugging

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

BreakingBricks

Some tools used in the Ruxcon / Kiwicon /SECT-T presentation "Breaking Bricks and Plumbing Pipes: Cisco ASA a Super Mario Adventure."

concordance

Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.

demos

Demos of various injection techniques found in malware

disclosures

espcap

Packet capture and indexing with Elasticsearch

exploit-CVE-2016-10033

PHPMailer < 5.2.18 Remote Code Execution

exploits

Various exploits, metasploit modules, etc.

exploits-1

Miscellaneous exploit code

how2heap

A repository for learning various heap exploitation techniques.

malware

malware source codes

malware_analysis

Repository containing Yara rules, indicators and tools from PhishMe Research.

Mirai-Source-Code

Leaked Mirai Source Code for Research/IoC Development Purposes

Misc-PowerShell-Stuff

random powershell goodness

ms16-032

nishang

Nishang - PowerShell for penetration testing and offensive security.

NorthKoreaDNSLeak

Snapshot of North Korea's DNS data taken from zone transfers.

OfficeMalware

oscp

oscp-scripts

PenTesting-Scripts

A ton of helpful tools

php-webshells

Common php webshells. Do not host the file(s) on your server!

Public

A collection of all my publicly released material.

ShellCodeInjector_MsBuild

Volatility-Plugins

webshell

This is a webshell open source project

windowsEnum

Batch file to help automate Windows enumeration for privilege escalation

XOR-Files

Powershell & Python XOR 2 Files

zxshell

a open source rat from china