threat-intel
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
defensive-toolsintrusion-detectionioc-management+4
369
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
mohuihui/antispyAntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and…
reveng007/darkwidowIndirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a…
fox-it/dissectDissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…
mgeeky/threadstackspooferThread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners…
safedep/pmgPMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
hasherezade/mal_unpackRuns packed malware in a controlled environment, waits for self-unpacking, dumps PE files and shellcodes from memory, and terminates the process.
d4rksystem/vmwarecloakA PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.
d7ead/mkpivmGenerate polymorphic, position-independent virtual machines (PIVMs) from arbitrary x86/x64 shellcode.
squiblydoo/debloatA GUI and CLI tool for removing bloat from executables
maddiestone/conpresentationsSlide decks from my conference presentations
hfiref0x/wdextractExtract Windows Defender database from vdm files and unpack it
andrewmichaelsmith/bluepotJava-based Bluetooth honeypot that captures and stores malware from BlueBugging and BlueSnarfing attacks, with a GUI for monitoring and log analysis.
matteyeux/corunadeobfuscated JS and blobs from https://b27[.]icu, first attempt at using claude
d4rksystem/vboxcloakA PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade…
fhightower/ioc-finderPython library for extracting Indicators of Compromise, URLs, IP addresses, hashes, and email addresses from text using declarative grammars instead…
alexmyg/andropytoolA framework for automated extraction of static and dynamic features from Android applications