Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
Repository Index
47,133 repositories indexed
25–48 of 67 · Most stars
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
Full featured multi arch/os debugger built on top of PyQt5 and frida
- frida
- pyqt5
- reverse-engineering
- cracking
Free Windows Detector Software
- exeinfo
- detector
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- bitlocker
- password-cracker
- cuda
- cryptography
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
🔑 Local-first Secrets Manager
- password
- password-manager
- desktop
- credentials
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
A secure password manager for macOS,Linux and Windows platforms
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
- cybersecurity
- incident-response
- sysinternals
- nirsoft
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
Drltrace is a library calls tracer for Windows and Linux applications.
- dbi
- malware-analysis
- malware-detection
- api-trace