Sajan Kumar.S's Projects
SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
Generic Signature Format for SIEM Systems
Set of SIGMA rules (>150) mapped to MITRE Att@k tactic and techniques
A Splunk App containing Sigma detection rules, which can be updated from a Git repository.
Sigma rules from Joe Security
Collection of rules created using YARA-Signator over Malpedia
Signature base for my scanner tools
An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
Image transformation service using libvips, based on Skipper.
SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
MODBUS Penetration Testing Framework
Automated pentest framework for offensive security experts
SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack, and view Saved Searches configured by teammates.
Sophos-ReversingLabs 20 million sample dataset
Visualization of Nessus Vulnerability Scanner data in Splunk
The best way to scan for weak ssh passwords on your network
Robot Framework test library for SSH and SFTP
An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
Stock market analyzer and predictor using Elasticsearch, Twitter, News headlines and Python natural language processing and sentiment analysis
Real-time, container-based file scanning at enterprise scale
Stroom is a highly scalable data storage, processing and analysis platform.
Sysmon configuration file template with default high-quality event tracing
Investigate suspicious activity by visualizing Sysmon's event log
Technical Analysis Library using Pandas and Numpy
A Splunk app with saved reports derived from Sigma rules
Fileless Ransomware Example
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
Collection of walkthroughs on various threat hunting techniques
A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
A collection of typical false positive indicators