Credential-Hunting
necr00/credential-huntingRead-only post-exploitation credential hunter that surfaces reusable passwords, keys, hashes, and credential files across Windows and Linux hosts…
forensicsincident-responseinformation-gathering+7
177
necr00/credential-huntingRead-only post-exploitation credential hunter that surfaces reusable passwords, keys, hashes, and credential files across Windows and Linux hosts…
puckblush/tofuWindows offline filesystem hacking tool for Linux
fuzzysecurity/powershell-suiteCollection of PowerShell utilities for Windows API interaction, process/token enumeration, debug detection, memory dumping, and post-exploitation…
lethal-forensics/macos-collectorShell script for automated collection and analysis of macOS forensic artifacts, including persistence enumeration, unified logs, and file system…
bilalalshiekh912/incident-response-report-teamcity-compromise-cve-2024-27198-Forensic analysis of a TeamCity server compromise via CVE-2024-27198, detailing initial access, webshell persistence, and system enumeration from…
nccgroup/detectwindowscopyonwriteforapiEnumerate various traits from Windows processes as an aid to threat hunting
lsecqt/sessionviewA portable C# utility for enumerating local and remote windows sessions
anjai7/tryhack3m-bricks-heistTryHackMe CTF writeup — WordPress RCE via CVE-2024-25600, crypto miner forensics, and LockBit ransomware group identification
elevenpaths/focaTool to find metadata and hidden information in the documents.
lgandx/pcredzThis tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…
amnestytech/investigationsCurated indicators of compromise (IOCs) from Amnesty International's technical investigations into targeted threats against human rights defenders,…
graniet/operative-frameworkRust-based OSINT framework for digital investigations: manage targets, execute modules, create links, export PDF reports, and extend via custom…
s0md3v/orbitBlockchain Transactions Investigation Tool
mlgualtieri/ntlmrawunhideParses network packet captures (pcap, pcapng, etl) to extract NTLMv2 hashes in a crackable format, supporting native Windows binaries like NETSH and…
rek7/mxtractLinux memory dumper and analyzer that scans process memory for credentials, private keys, and IPs using regex patterns. Supports mass scanning,…
mspicer/pcapinatorA tool for processing a lot of pcaps using tshark
ctrlaltint3l/intelligenceCentralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…
azizaltuntas/network-analysis-toolsPcap analysis toolkit for extracting visited sites, emails, URLs, user-agents, connection details, and detecting web attacks from capture files.