
ADRecon
PowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.

PowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.

Proof-of-concept script that analyzes Windows memory dumps to recover visited Tor onion services, bypassing Tor Browser's anonymity by exploiting…

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

This repository contains a list of new remediation scripts.

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…

A tool for mapping cyber crime

Repository for the LinkScope Client software.


A tool to use novel locations to extract metadata from Office documents.

Tool for searching pdfs withthin google and extracting pdf metadata

Cortex: a Powerful Observable Analysis and Active Response Engine

A simple, reliable and reasonably fast network capture analyzer.

A python tool that will extract exif data from picture with two methods

Dump TeamViewer ID and password from memory. Works much better than other tools.

Malware analysis from the domain goxlr.net

Post-Exploitation EVTX Analyzer for BloodHound Mapping