minisign
jedisct1/minisignA dead simple tool to sign files and verify digital signatures.
cryptographydefensive-toolsencryption-decryption-tools+1
2.8k
jedisct1/minisignA dead simple tool to sign files and verify digital signatures.
bytecode77/r77-rootkitFileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
digitalruby/ipbanAutomated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…
med0x2e/sigflipSigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
intel/intel-linux-processor-microcode-data-filesOfficial Intel microcode data files for updating processor firmware to mitigate security vulnerabilities and address functional issues on Linux…
idaholab/malcolmMalcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…
apr4h/cobaltstrikescanScan files or process memory for CobaltStrike beacons and parse their configuration
jfmaes/lazysignCreate fake certs for binaries using windows binaries and the power of bat files
gendigitalinc/sageLightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.
nextronsystems/ransomware-simulatorSafe ransomware simulation tool for testing antivirus detection. Simulates macro staging, volume shadow copy deletion, document encryption, and note…
malvuln/ransomlordRansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware…
packetsifter/packetsiftertoolPacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…
zh54321/sharepointdumperPowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…
malgamy/yara_rulesCurated signature-rule collection for detecting and classifying malicious files via pattern matching, with CLI instructions for scanning files and…
alloysecuregroup/phantomfsWindows honeypot using ProjFS to project decoy files that trigger Event Log and desktop alerts when accessed, with SMB remote session logging for…
blacksnufkin/checkplzScan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
viralmaniar/ddwpastereconDDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team…
cybercentrecanada/cartPython implementation of the CaRT library for (un)inerting files.