mimicry
chaitin/mimicryActive deception tool that transparently migrates attackers from real targets to honeypots during exploitation and post-exploitation, supporting…
defensive-toolsincident-responsered-teaming+1
62
chaitin/mimicryActive deception tool that transparently migrates attackers from real targets to honeypots during exploitation and post-exploitation, supporting…
lawndoc/mediatorAn extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.
rakosn1cek/oversightTerminal-based security auditor that statically analyzes shell scripts and commands, dynamically enforces sandboxing via Linux Landlock, and provides…
msnightmare/greatxmlExploit tool that bypasses BitLocker encryption by leveraging Windows Recovery Environment (WinRE) and Defender offline scan state to gain…
k3rnix/portguardUSB port access control tool for Debian with whitelist management, automatic background scanning daemon, and CLI interface to block or allow USB…
tclahr/uacPortable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…
mandiant/capaRule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…
nowsecure/fsmonFilesystem monitor tool for Linux/Android iOS/macOS
mvt-project/androidqfPortable forensic acquisition tool for Android devices that extracts SMS, APKs, system logs, and process lists to identify spyware and compromise…
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
botherder/androidqfPortable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…
joe-desimone/patriotIn-memory stealth detection tool that identifies process hollowing, module stomping, unbacked executable regions, and anomalous CONTEXT structures…
memoryforensics1/volexpGUI-based memory forensics tool for Volatility 2, enabling process/PE/handle inspection, file extraction, registry view, MFT analysis, and suspicious…
0xsp-srd/aetherWindows memory-forensics and threat hunting tool that scans live process memory for malicious patterns, injection techniques, and reflectively loaded…
mindcrypt/stegowiperA powerful and flexible tool to apply active attacks for disrupting stegomalware
adityaks/meleePython-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
m10ust/machscopemacOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool