EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Repository Index
58,136 visible repositories in the index
985–1,008 of 1,443 · Most stars
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
midgetpack is a multiplatform secure ELF packer
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
- cryptography
- hacking
- system
- cheatsheet
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- binary-instrument
- android
- malware-research
- reverse-engineering
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Encrypted Chat. No History. No Logs.
- encryption
- nacl
- chat
- secure
Sockets with pure VB6 impl of TLS encryption
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
- airlift
- airtraffic
- ios
- sandbox-escape
:key: Authentication plugin for aurelia
A malware/botnet analysis framework written in Ruby.
Easy to use and read action and content based authorizations.
- hacktoberfest
- hacktoberfest2020
Malware Analysis Tool using Function Level Fuzzy Hashing
A Wordpress Honeypot
Command line access to the Registry
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
- deckgl
- geopolitics
- intelligence
- maplibre
collection of C/C++ programs that try to get compilers to exploit undefined behavior
Port of the xxhash library to C++17.
- hashing
- optimized
- xxhash
- cpp
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
Portable version of Bouncy Castle with support for .NET 4, .NET Standard 2.0, MonoAndroid, Xamarin.iOS, .NET Core