
ALPC-Enumerator
A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

This repository contains a list of new remediation scripts.



Cortex: a Powerful Observable Analysis and Active Response Engine

A command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows (ETW) AutoLogger sessions.

Simple Webshell Scanner

Suspicious DGA from PDNS and Sandbox.

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

Scripts and utilities to help your hacking needs

Botnet command & control monitor

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV

RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically.

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

Malware analysis from the domain goxlr.net

In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB…