"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Repository Index
47,133 repositories indexed
49–72 of 137 · Most stars
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Scan files or process memory for CobaltStrike beacons and parse their configuration
A concise, directive, specific, flexible, and free incident response plan template
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
A collection of programs that access and manipulate ELF files.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
- cybersecurity
- incident-response
- sysinternals
- nirsoft
Simple, drag-and-drop, password-based file encryption
- encryption-utility
- cross-platform
- encryption
- gui
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
$MFT directory tree reconstruction & FILE record info
- mft-browser
- mft
- powershell
- winform