whitekernel's starred repositories

mkdocs-material

Documentation that simply works

TinyCheck

TinyCheck allows you to easily capture network communications from a smartphone or any device which can be associated to a Wi-Fi access point in order to quickly analyze them. This can be used to check if any suspect or malicious communication is outgoing from a smartphone, by using heuristics or specific Indicators of Compromise (IoCs). In order to make it working, you need a computer with a Debian-like operating system and two Wi-Fi interfaces. The best choice is to use a Raspberry Pi (2+) a Wi-Fi dongle and a small touch screen. This tiny configuration (for less than $50) allows you to tap any Wi-Fi device, anywhere.

Language:PythonLicense:Apache-2.0Stargazers:3073Issues:81Issues:84

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

Language:RustLicense:GPL-3.0Stargazers:2677Issues:51Issues:93

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

Language:C++License:MITStargazers:1439Issues:23Issues:128

iris-web

Collaborative Incident Response platform

Language:JavaScriptLicense:LGPL-3.0Stargazers:1018Issues:27Issues:356

chepy

Chepy is a python lib/cli equivalent of the awesome CyberChef tool.

Language:PythonLicense:GPL-3.0Stargazers:893Issues:20Issues:24

play-tailwind

Play is free and open source Tailwind CSS template for - Startup, SaaS, Apps, Business and More. It comes with a high-quality design and all essential components & pages you need to launch a complete website.

Language:HTMLLicense:MITStargazers:844Issues:8Issues:4

ADTimeline

Timeline of Active Directory changes with replication metadata

Language:PowerShellLicense:GPL-3.0Stargazers:465Issues:32Issues:12

dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows

Language:C++License:LGPL-2.1Stargazers:364Issues:27Issues:58

medusa

A fast and secure multi protocol honeypot.

Language:RustLicense:NOASSERTIONStargazers:302Issues:13Issues:4

DFIR-O365RC

PowerShell module for Office 365 and Azure log collection

Language:PowerShellLicense:GPL-3.0Stargazers:226Issues:12Issues:3

ORADAD

Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data

Language:C++License:GPL-3.0Stargazers:215Issues:15Issues:18

DFIR4vSphere

Powershell module for VMWare vSphere forensics

Language:PowerShellLicense:GPL-3.0Stargazers:136Issues:7Issues:2

sysdiagnose

Forensic toolkit for iOS sysdiagnose feature

Language:PythonLicense:EUPL-1.2Stargazers:128Issues:10Issues:62

cerebrate

Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools.

Language:PHPLicense:AGPL-3.0Stargazers:81Issues:16Issues:130

iris-client

Python client for DFIR-IRIS

Language:PythonLicense:LGPL-3.0Stargazers:18Issues:2Issues:7

iris-misp-module

IRIS module interfacing MISP with IRIS

Language:PythonLicense:NOASSERTIONStargazers:6Issues:3Issues:3
Language:PythonLicense:LGPL-3.0Stargazers:5Issues:3Issues:1