hillu Goto Github PK

grr

GRR Rapid Response: remote live forensics for incident response

handlekatz

PIC lsass dumper using cloned handles

idapro-debian

Debian packaging for IDA Pro

ifplugo

ifplugd-powered network link status notification for Go

kraken

Cross-platform Yara scanner written in Go

laurel

Transform Linux Audit logs for SIEM usage

libldm

lief

LIEF - Library to Instrument Executable Formats

local-log4j-vuln-scanner

Simple local scanner for vulnerable log4j instances

local-spring-vuln-scanner

Simple local scanner for applications containing vulnerable Spring libraries

lsass-shtinkering

lua-mode

Emacs major mode for editing Lua

mauerspecht

Simple Probing Tool for Corporate Walled Garden Networks

misbrands

The world's most hated IT stickers

neo23x0-audit-rules

Best Practice Auditd Configuration

ngircd

Free, portable and lightweight Internet Relay Chat server

nmap-nse-smb2-enhancement

Enhancements for NMAP Script Engine SMB2/3 support

openvpn

OpenVPN is an open source VPN daemon

paraglob

A fairly quick data structure for matching a string against a large list of patterns.

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

pepita

Run Splunk search from Emacs

plast

Modular command-line threat hunting tool & framework.

ply

Light-weight Dynamic Tracer for Linux

preeny

Some helpful preload libraries for pwning stuff.

raccine

A Simple Ransomware Vaccine

runner

The Runner for GitHub Actions :rocket:

sigma

Generic Signature Format for SIEM Systems

signature-base

Signature base for my scanner tools

slinkwatch

automatic enumeration and maintenance of Suricata monitoring interfaces