Tools

ragibson/steganography

Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction)…

stanfrbd/cyberbro

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

neo23x0/fenrir

Simple Bash IOC Scanner

secrary/ssma

SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]

spyre-project/spyre

simple YARA-based IOC scanner

mhelwig/adwind-decryptor

Simple decrypter for Java AdWind, jRAT, jBifrost trojan

respondiq/jsp-webshell-scanner

🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.

busindre/mozcache

Simple shell script to perform forensic analysis of the Mozilla-Browsers cache (Firefox, Iceweasel and Seamonkey).

cyb3rtus/keepass_cve-2023-24055_yara_rule

Contains a simple yara rule to hunt for possible compromised KeePass config files

gmh5225/dma-processdumper

Simple Process Dumper using DMA over a PCIe FPGA device

murrayr0123/cve-2024-3400-compromise-checker

A simple bash script to check for evidence of compromise related to CVE-2024-3400

google/stenographer

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…

osirislab/awesome-rust-security

Curated list of awesome projects and resources related to Rust and computer security

mandiant/macos-unifiedlogs

A cross platform parser for Apple UnifiedLogs!

botherder/kraken

Cross-platform Yara scanner written in Go

piat0n/baremetal-ram-dumper

A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

google/hashr

Builds forensic file hash sets from disk images, packages, and archives across GCP, AWS, and local sources, with deduplication and PostgreSQL/Spanner…

mnrkbys/norimaci

Lightweight macOS malware analysis sandbox that monitors system activity via OpenBSM or Monitor.app, generating detailed reports and timelines of…