Repository Index

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules

• cloudflare
• firewall
• user-agent
• firewall-rules

A convenience library for generating, comparing and inspecting password hashes using the scrypt KDF in Go 🔑

• scrypt
• go
• hash
• password

Tool to help analyze PDF files

TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency

• domain-scanner
• subdomain

Open-source cross-platform defensive spyware, stalkerware and surveillance software detector

• anti-surveillance
• dfir
• keylogger-detector
• privacy

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

Tools for the Computer Incident Response Team :computer:

• dfir
• python
• carbonblack
• malware-analysis

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

Block & stream ciphers, public key crypto, hashing, KDF, MAC, PKCS, TLS, ASN.1, BER/DER, etc.

Dynamically generate self-signed certificates and certificate authorities for Go tests

• golang
• certificate-generation
• go
• testing

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.

• argon2
• bcrypt
• go
• hashing

Builds json representation of PDF malware sample

reCAPTCHA v3 Cloudflare Worker

• cloudflare-workers
• cloudflare-worker
• cloudflare
• recaptcha

Liquid Auth Service

• authentication
• fido2
• p2p
• passkeys

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir

Detect whether a site is running behind Cloudflare.

• cloudflare
• waf
• detection
• nodejs

Use Cloudflare Turnstile in Phoenix

• captcha
• cloudflare
• elixir
• liveview

A Single Library Parser to extract meta information,static analysis and detect macros within the files.

• malware-analysis
• pdf-parsing
• pe-executable
• office-files

Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.

• bpf
• ebpf
• forensics
• goroutine

HMAC-based Extract-and-Expand Key Derivation Function (HKDF) for crystal lang

A CTF platform for The Many Hats Club