sulthantth

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

awesome-log4shell

An Awesome List of Log4Shell resources to help you stay informed and secure! 🔒

sigma2snypr

Sigma framework integration with Snypr platform

CarbonCopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

ToolAnalysisResultSheet

Tool Analysis Result Sheet

suricataja3

Create a simple suricata rule blocking on ja3 hash from pcap

Kaiser

Fileless persistence, attacks and anti-forensic capabilties.

living-off-the-land

Fileless attack with persistence

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

sentinel-training

Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

ZheTian

::ZheTian / 强大的免杀生成工具，Bypass All.

Kage

Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler

Linux-Privilege-Escalation-MindMap

OSCP Privilege Escalation MindMap/Guide

Pluralsight-Course-Downloader

Chrome Extension: Easily download course video from pluralsight. Videos renamed and organized in folder.

Adama

Searches For Threat Hunting and Security Analytics

sysmon-dfir

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

detect-responder

BoomBox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

DanderSpritz_lab

A fully functional DanderSpritz lab in 2 commands

MSRPC-to-ATTACK

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

evtx

Golang Parser for Microsoft Event Logs

ForensicsTools

Tools for DFIR

golang-evtx

libevtx

Library and tools to access the Windows XML Event Log (EVTX) format

evtx

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format

python-exe-unpacker

A helper script for unpacking and decompiling EXEs compiled from python code.

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts