usbsas
cea-sec/usbsasTool and framework for securely reading untrusted USB mass storage devices.
data-recoverydefensive-toolsdigital-forensics+1
37418h 59m ago
cea-sec/usbsasTool and framework for securely reading untrusted USB mass storage devices.
spyboy-productions/facad1ngOpen-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to…
vxfemboy/ghostportA high-performance port spoofing tool built in Rust. Confuse port scanners with dynamic service emulation across all ports. Features customizable…
paulnorman01/forensiaAnti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
prismorsec/prismorSelf-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…
bats3c/ghost-in-the-logsKernel-level tool to disable Sysmon and Windows Event Logging via driver-based hook injection, enabling stealthy post-exploitation operations on…
itm4n/pplcontrolWindows tool to list, get, set, protect, and unprotect process protection levels (PP/L) for debugging, inspection, and privilege escalation.
papermtn/slack-watchmanSlack enumeration and exposed secrets detection tool
gildasio/h2th2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
nextronsystems/ransomware-simulatorSafe ransomware simulation tool for testing antivirus detection. Simulates macro staging, volume shadow copy deletion, document encryption, and note…
wgpsec/createhiddenaccountA tool for creating hidden accounts using the registry || 一个使用注册表创建隐藏帐户的工具
twosevenonet/edrchokerA tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.
olafhartong/bamboozledrA comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
idov31/mrkaplanPowerShell tool for red teamers that clears execution evidence by stopping event logging, removing file and registry artifacts, and saving timestamps…
dylandavis1/dscourierProof-of-concept tool leveraging WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries, enabling EDR bypass for…
hwbp/clr-unhookModern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan in-memory…
cyberark/ketshashA little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
linux-lock/bpflockeBPF-driven security tool for locking and auditing Linux machines. Restricts kernel features, blocks fileless execution, protects memory, and hardens…