A framework for orchestrating forensic collection, processing and data export
Repository Index
57,138 visible repositories in the index
481–504 of 816 · Most stars
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
JSON Object Signing and Encryption (JOSE) for Erlang and Elixir
- jose
- cryptography
- jwt
- erlang
$MFT directory tree reconstruction & FILE record info
- mft-browser
- mft
- powershell
- winform
Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
BadActor.org An in-memory application driven jailer written in Go
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
Following googlecode project crypto-js, provide standard and secure cryptographic algorithms for NodeJS. Support MD5, SHA-1, SHA-256, RC4, Rabbit, AES, DES, PBKDF2, HMAC, OFB, CFB, CTR, CBC, Base64
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
Tools to fingerprint WiFi Access Points running the Broadcom SDK and a list of known affected devices.
The universe in numbers. Free, open-source calculators for everything countable.
Inject OWASP recommended HTTP Headers for increased security in a single line
- aspnetcore
- middleware
- owasp
- security
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
Generic Low Interaction Honeypot
- honeypot
- hacktoberfest
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
A collection of useful utility functions
- utility
- utilities
- string
- strings
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
Splunk code (SPL) for serious threat hunters and detection engineers.
- splunk
- threat-hunting
- use-case
- siem
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
Elliptic curve cryptography functions: Private Key, Public Key, Signature, AES, Encryption, Decryption
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG