fox-it/citrix-netscaler-triageForensic triage toolkit for Citrix NetScaler devices, featuring a Dissect-based IOC scanner for webshells, timestomping, and suspicious binaries,…
withsecurelabs/ppid-spoofingScripts for performing and detecting parent PID spoofing
withsecurelabs/memory-carving-scriptsScripts for extracting useful information from infected memory dumps
rippsec/cve-2026-31431-copy-failComprehensive analysis of CVE-2026-31431, a Linux kernel LPE, including exploit methodology, detection scripts, YARA rules, auditd and Falco…
habibkaratas/sorry-ransomware-analysisSorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign
codesource/copyfail-checkShell script to detect CVE-2026-31431 (Copy Fail) exposure and mitigations on Linux systems: kernel check, module state, boot params, AF_ALG…
keulenr01/remediate-adobeacrobat-cve-2026-34621Intune Proactive Remediation scripts to enforce patched Adobe Acrobat/Reader versions and disable JavaScript to mitigate CVE-2026-34621 exploitation.
pedro-lucas-melo/estudo-de-caso-cve-2026-31431-copyfail🔐 Estudo de caso completo do CVE-2026-31431 (CopyFail) — vulnerabilidade crítica de escalada de privilégio no kernel Linux. Inclui análise técnica,…
mvt-project/mvtForensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…
twi1ight00/printnightmareProvides PowerShell and batch scripts to back up, restore, and adjust Access Control Lists (ACLs) mitigating PrintNightmare Print Spooler…
spectralzero/netscopeOffline-first network investigation and response platform for Windows. Turns a pcap or live capture into a full forensic verdict — attack story,…
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
yamato-security/enablewindowslogsettingsDocumentation and scripts to properly enable Windows event logs.
pcrosby-1990/cip-security-pocProof-of-concept reproducing CVE-2021-22681's hardcoded-key flaw and validating a per-device mutual TLS/CRL fix over simulated EtherNet/IP, with IEC…
ncsc-nl/citrix-2025Digital forensics and incident response tool using YARA rules to scan Citrix NetScaler core dumps, disk images, and live hosts for signs of…
wortell/log4jRepo containing all info, scripts, etc. related to CVE-2021-44228
rubo77/log4j_checker_betaa fast check, if your server could be vulnerable to CVE-2021-44228
occamsec/log4j-checkerBash and PowerShell scripts to scan a local filesystem for Log4j .jar files which could be vulnerable to CVE-2021-44228 aka Log4Shell.
