packetsifterTool
packetsifter/packetsiftertoolPacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…
defensive-toolsdigital-forensicsforensics+5
93
packetsifter/packetsiftertoolPacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…
thieveshkar/rootquest-ctf-box-multi-stage-exploitation-vmCustom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics,…
daddycocoaman/dumpscanFinding secrets in kernel and user memory
tonyphipps/meerkatA collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
securityjoes/masterparserMasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
rowingdude/analyzemftanalyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
mlgualtieri/ntlmrawunhideNTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…
forrest-orr/artifacts-kitPseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.
shredzwho/ig-detectiveOSINT tool researched and designed to hunt down IG handles
sobri3195/pegasus-neoPEGASUS-NEO is a comprehensive penetration testing framework designed for security professionals and ethical hackers. It combines multiple security…
kd8bny/limeaideA python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
securityjoes/forensicminerA really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
emrekybs/draculaosDracula OS is a Linux operating system meticulously designed for OSINT (Open Source Intelligence) and Cyber Intelligence missions.
emrekybs/bluefishAutomation tool designed to simplify the analysis of PCAP (Packet Capture) files
star-sg/challengesChristmas-themed CTF Advent Calendar with 12 structured challenges across binary exploitation, cryptography, reverse engineering, forensics, OSINT,…
hexastrike/ivanti-connect-secure-logs-parserA Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282,…
magicbytes/magicarchMagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped…
bst04/cybersourcesA curated list of cybersecurity tools and resources.