Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
Repository Index
47,133 repositories indexed
49–72 of 75 · Most stars
A starter project for next js with authentication - Contains React 17 + Typescript + Tailwind CSS 2 + React Query 3 + GitHub Auth + LinkedIn Auth + Password-less Auth + Fauna DB + ESLint + Prettier + Husky
- vercel
- nextjs
- nextjs-starter
- nextjs-boilerplate
Drltrace is a library calls tracer for Windows and Linux applications.
- dbi
- malware-analysis
- malware-detection
- api-trace
Delphi Detours Library
- hooks
- detours
- x86-64
- windows
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
Minimal code to connect to a CEF debugger.
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
A Highly Accessible and Automated Virtualization Platform for Security Education
- cybersecurity
- virtualization
- docker
- virtualbox
Windows Live Artifacts Acquisition Script
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
- airlift
- airtraffic
- ios
- sandbox-escape
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Deep memory analysis for Windows processes — the tool that saves you hours of debugging
- analyzer
- binary-analysis
- delphi
- dissassembler
Incident Response Triage - Windows Evidence Collection for Forensic Analysis
windows pe packing
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel
Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files
- codecave
- cpp
- pe
- winapi
Next.js boilerplate for passwordless authentication with Prisma and next-auth with apollo graphql api with style from tailwindcss
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
A vulnerability patch gathering tool
A Chargebee focused T3 Stack that integrates User Subscriptions, Authentication and Testing. Driven by Prisma ORM. Deploys to Vercel