weslambert

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

cve

Gather and update all available and newest CVEs with their PoC.

digger

Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline ⚡️

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

FIR

Fast Incident Response

Home-Grown-Red-Team

HijackLibs

Project for tracking publicly disclosed DLL Hijacking opportunities.

GC2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

ransomware_map

Map tracking ransomware, by OCD World Watch team

substation

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.

kunai

Threat-hunting tool for Linux

Malware

macOS Malware Collection

RITA-J

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

testmynids.org

A website and framework for testing NIDS detection

DocIntel

Open Source Platform for storing, organizing, and searching documents related to cyber threats

yara-forge

Automated YARA Rule Standardization and Quality Assurance Tool

pCraft

pCraft is a PCAP Crafter, which creates a PCAP from an AMI scenario.

dynmx

Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!

WonkaVision

windows-dll-env-hijacking

Project for identifying executables and DLLs vulnerable to environment-variable based DLL hijacking.

sigmaio

simple webapp for converting sigma rules into siem queries using the pySigma library

Yobi

Yara Based Detection Engine for web browsers

detections

Placeholder for my detection repo and misc detection engineering content

windows-sandbox-to-elastic

Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.

strelka-ui

Strelka Web UI for File Submission and Analysis

etw-event-dumper

ARGUS

fmd

Windows file metadata / forensic tool.

iris-velo-org-module