
cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Generates unique fingerprints of malware HTTP requests from pcap files using Tshark, enabling identification and grouping of malware families through…

LD_PRELOAD shared library that hides a Linux process from tools like ps and lsof by intercepting readdir and proc filesystem calls.

Python-based keylogger for capturing and logging keystrokes. Designed for educational security research and testing.

Botnet command & control monitor

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

EGESPLOIT is a golang library for malware development

Malware/IOC ingestion and processing engine

A command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows (ETW) AutoLogger sessions.

Install the tools and start Attacking , black-tool v5.5.5 ! ⬛

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

Neto | A tool to analyse browser extensions

A tool to retrieve malware directly from the source for security researchers.

ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.

Telegram Desktop Session Stealer

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.