Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
47,133 repositories indexed
145–168 of 247 · Most stars
Defanged Indicator of Compromise (IOC) Extractor.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Samsung Tizen root
Using Intel's PIN tool to solve CTF problems
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
A Linux packet crafting tool.
Drltrace is a library calls tracer for Windows and Linux applications.
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Boomerang Decompiler - Fighting the code-rot :)
A Tool for Automatic Analysis of Malware Behavior
Guardian DB integration for tracking tokens and ensuring logout cannot be replayed.
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering(使用C和Intel x86汇编开发的Windows x86可执行文件打包工具,打包后的新文件可以阻碍逆向工程)
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
Linux Security and Monitoring Scripts
Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
Game Boy ROM disassembler with RGBDS compatible output
Respounder detects presence of responder in the network.
Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems