Random-Scripts
star-sg/random-scriptsCollection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…
digital-forensicsforensicshash-analysis+5
star-sg/random-scriptsCollection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…
qsecure-labs/deadmatterOffset Independent Credential Extraction Tool
svdwi/blueboxOpen-source threat intelligence platform for malware and observable analysis. Enriches IPs, domains, URLs, and hashes with external sources, performs…
withsecurelabs/shadowhammerBatch-mode checker for Shadowhammer malware indicators, scanning local or provided MAC addresses against known malicious hashes, with offline support…
withsecurelabs/radare2-scriptsCollection of radare2 scripts for malware analysis: carve binaries from memory dumps, patch PE headers, and decode hashed function imports in…
kaandemir993/malwareforge---advanced-static-malware-analyzerAdvanced Static malware analyzer that reveals 8 injection techniques, critical API calls, hidden strings, exports PE sections (.text, .rdata) as…
securest8/npm-incident-responseScanner for the keyv/cacheable supply-chain attack: detects compromised npm packages, verifies payload hashes, and finds persistence implants in repo…
executemalware/malware-iocsCurated collection of indicators of compromise extracted from real-world malware investigations, including hashes, domains, and IPs for threat…
abusech/yaraifyOpen YARA scan- and search engine
oalabs/hashdbAssortment of hashing algorithms used in malware
nextronsystems/gimphashImphash-like calculation on Golang binaries
pan-unit42/dotnetfilePython library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.
inquest/python-inquestlabsA Pythonic interface and command line tool for interacting with the InQuest Labs API.
c3rb3ru5d3d53c/binlexA Binary Genetic Traits Lexer Framework
squiblydoo/certreportA tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.
elevenpaths/diario-commandline-toolsCLI client for bulk DIARIO API consumption: upload PDF/Office documents, query file hashes, and automate malware analysis workflows via command-line…
iomoath/filewatchtowerFWT is a security analysis and file monitoring tool that utilizes Sysmon events.
dave_m/clamtkAn easy to use, light-weight, on-demand virus scanner for Linux systems. For additional help, see the <a…