
darkfox
CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

Burp Suite extension for extracting metadata from files

It was developed to speed up the processes of SOC Analysts during analysis

A Zeek STUN protocol analyzer based on Spicy.

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interesting relations…

Extract indicators of compromise from text, including "escaped" ones.

A tool for processing a lot of pcaps using tshark

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…

An OSINT Metadata analyzing tool that filters through tags and creates reports

Pcap (capture file) Analysis Toolkit(v.1)

operative framework is a rust investigation OSINT framework, you can interact with multiple targets, execute multiple modules, create links with…

mXtract - Memory Extractor & Analyzer

Centralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…

Linux Process Discovery. C Library, Go bindings, Runtime.

Indicators of Compromise from Amnesty International's cyber investigations