
DARKSURGEON
DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
Tools for blue team, defensive security, and threat protection.

DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.

High-interaction MitM SSH honeypot

Accompanying PowerShell Modules for DevSec Defense Presentation

Cmd.exe Command Obfuscation Generator & Detection Test Harness

Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.

PowerShell Remote Download Cradle Generator & Obfuscator

Detect HTTP stalling attacks like slowloris with Bro

A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389

Security hotfix for CVE-2017-8802

Protect your parents from phishing

Binaries, PowerShell scripts and information about Digital Signature Hijacking.

Security Tool to detect arp poisoning attacks

👮 👊 RegEx Denial of Service (ReDos) Scanner

Endless HTTP honeypot that serves infinite random data to malicious bots via a reverse-proxied URL, exhausting their memory and storage resources.

Armadito antivirus main repository


Network Security Monitoring on Raspberry Pi type devices

POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command…