letsdefendio/simple-live-data-collectionClient-server tool for live data collection during incident response. Admin sends requests to clients to gather system information for forensic…
blakebratcher/wcw-cyberring-pav-decryptorCryptanalysis of a proprietary 1999 video DRM system. Recovers 61 encrypted wrestling videos from the WCW Internet Powerdisk CD-ROM through static…
iomoath/filewatchtowerFWT is a security analysis and file monitoring tool that utilizes Sysmon events.
camp0/aiengineProgrammable packet inspection engine with NIDS, DNS classification, frequency analysis, and auto-regex generation. Supports Python/Ruby/Java/Lua…
slaughterjames/excelpeekStatic analysis tool for investigating potentially malicious Microsoft Excel files, extracting metadata, macros, and embedded objects to aid digital…
emrekybs/bluefishAutomation tool designed to simplify the analysis of PCAP (Packet Capture) files
nccgroup/impossibletravelloganalysisBasic log analysis tool to detect impossible travel via IP address geographic information
hamza-megahed/odinCentralized IoC scanner that deploys Loki across endpoints, collects detection results, and parses logs into CSV for incident response and forensic…
m0vi0/pacmapGraph-first network traffic visualizer for live capture and PCAP replay with checkpoint diffing, path tracing, and Wireshark-style display filters…
kaandemir993/salat-stealer-telegram-proxy-decoy-c2-analysis"Reverse engineering analysis of Salat Stealer, a Go-based info-stealer that uses a Telegram proxy decoy, C2 communication, and encrypted memory…
mindcrypt/visual-forensic-steganographyBrowser-based tool for visual steganography detection via LSB analysis on digital images, enabling forensic examination and stegomalware…
prophetcraft/jarhunterJAR analysis tool for exploring, searching, and extracting specific classes from large JAR files with bytecode search, multi-selection extraction,…
bedazzlinghex/memory-analysisContains tools to perform malware and forensic analysis in Memory
bytespulse-oe/wp2shell-hestia-scannerRead-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted…
kaandemir993/-remcos-rat-fileless-svchost-injection-obfuscated-payload-analysis-"Reverse engineering analysis of a fileless Remcos RAT variant that injects into svchost.exe via Native API calls. Covers obfuscated payload…
navytitanium/eitest-tools-scripts-iocsIOC feed and analysis toolkit for EITest campaigns, featuring C2 data decryption, victim payload decoding, and sinkhole log processing for threat…
0xusmanismail/lureLocal Linux binary analysis tool. Zero cloud. Zero root. See exactly what a binary does before you run it.
