47,133 repositories indexed
25–48 of 75 · Most stars
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
Interactive CTF Exploration Tool
Fork of the popular zip manipulation library found in the zlib distribution.
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Full featured multi arch/os debugger built on top of PyQt5 and frida
Free Windows Detector Software
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
Hacking Toolkit
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
🔑 Local-first Secrets Manager
Automatic and platform-independent unpacker for Windows binaries based on emulation
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
WinDBG Anti-RootKit Extension
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
A secure password manager for macOS,Linux and Windows platforms
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.