


Open YARA scan- and search engine

Hash collisions and their exploitations

Assortment of hashing algorithms used in malware


Imphash-like calculation on Golang binaries

OpenSSL engine for use with SymCrypt cryptographic library

C# version of NTLMRawUnHide


A Pythonic interface and command line tool for interacting with the InQuest Labs API.

Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later

A Binary Genetic Traits Lexer Framework

A C# tool to output crackable DPAPI hashes from user MasterKeys

ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication token based…

A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.