
hstsparser
A tool to parse Firefox and Chrome HSTS databases into forensic artifacts!

A tool to parse Firefox and Chrome HSTS databases into forensic artifacts!

Vulnerable web application to test CVE-2021-44228 / log4shell and forensic artifacts from an example attack

Python toolkit for malware analysis, designed to inspect suspicious files and extract indicators of compromise for security investigations.

History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.

Conducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows…

Technical Analysis of Bibi-Windows Wiper Targeting Israeli Organizations

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

[Linux] Two Privilege Escalation techniques abusing sudo token

Cross-platform registry browser for raw Windows registry files

Parses Windows MiniDump (MDMP) files with Kaitai Struct, extracting memory strings and scanning them against YARA rules for forensic and malware…