zaneGittins

n8n

Free and source-available fair-code licensed workflow automation tool. Easily automate tasks across different services.

text-generation-webui

A Gradio web UI for Large Language Models. Supports transformers, GPTQ, AWQ, EXL2, llama.cpp (GGUF), Llama models.

sshx

Fast, collaborative live terminal sharing over the web

pycdc

C++ python bytecode disassembler and decompiler

kong

Kong is a command-line parser for Go

nanodump

The swiss army knife of LSASS dumping

CursedChrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

Backstab

A tool to kill antimalware protected processes

USBvalve

Expose USB activity on the fly

rosenpass

Rosenpass is a post-quantum-secure VPN that uses WireGuard to transport the actual data.

Blackout

kill anti-malware protected processes ( BYOVD) (Microsoft Won )

BloodHound

Six Degrees of Domain Admin

Ekko

Sleep Obfuscation

uac

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

argparse

Argparse for golang. Just because `flag` sucks

web-traffic-generator

A quick and dirty HTTP/S "organic" traffic generator.

LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

sharem

SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.

ContainYourself

A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.

dftimewolf

A framework for orchestrating forensic collection, processing and data export

kunai

Threat-hunting tool for Linux

ChopChopGo

Rapidly Search and Hunt through Linux Forensics Artifacts

stelf-loader

A stealthy ELF loader - no files, no execve, no RWX

DetectRaptor

A repository to share publicly available Velociraptor detection content

Uncoder_IO

An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.

MAAS

Malware As A Service

velociraptor-to-timesketch

BPFDoor

BPFDoor Source Code. Originally found from Chinese Threat Actor Red Menshen

gomft

NTFS Master File Table (MFT) parser for Go.

velociraptor-artifacts-thor

Thor Artifacts for Velociraptor