Tools

airbus-cert/etl-parser

Event Trace Log file parser in pure Python

jeffssh/cve-2021-30860

Collection of materials relating to FORCEDENTRY

pandare9x/configuration_extractors

Configuration Extractors for Malware

withsecurelabs/garbageman

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

bedrock-safeguard/gentlemen-decryptor

First-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extraction. 35/35…

citrix/ioc-scanner-cve-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

markuta/bw-dump

A proof-of-concept for (CVE-2023-38840) that extracts plaintext master passwords from a locked Bitwarden vault.

nccgroup/yaml2yara

Generate bulk YARA rules from YAML input

leandrofroes/malware-research

General malware analysis stuff

dump-guy/powershell-tools

Collection of some easy of use tools - in powershell.

knight0x07/bibi-windows-wiper-analysis

Technical Analysis of Bibi-Windows Wiper Targeting Israeli Organizations

pugazhendii22/keepass-exfil-forensics

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…

b1tbreaker/cve-2025-48708

Lack of argument sanitization leading to password leakage in Ghostscript PDF versions up to 10.05.0.

joshatticus/ztewaste

Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694.

bilalalshiekh912/incident-response-report-teamcity-compromise-cve-2024-27198-

CyberDefenders JetBrains Lab

czabatta/thm-tempest

TryHackMe SOC Level 1 — Follina CVE-2022-30190, Nim C2, Chisel, PrintSpoofer, backdoor accounts

supermagnum/gr-qradiolink

GNU Radio out-of-tree (OOT) module for QRadioLink blocks.