
ThreatKB
Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

Malware/IOC ingestion and processing engine

Different methods to get current username without using whoami

Telegram Desktop Session Stealer

Code developed to steal certain browser config files (history, preferences, etc)

Neto | A tool to analyse browser extensions

Centralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…

Generates unique fingerprints of malware HTTP requests from pcap files using Tshark, enabling identification and grouping of malware families through…

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

Simple Webshell Scanner

Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime…

Strafer: A tool to detect potential infections in Elasticsearch instances

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

Virus Total API Maltego Transform Set For Canari

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

Scans websites for SocGholish JavaScript injections, deobfuscates malicious payloads, and reports shadowing domain URLs used in malvertising…

A command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows (ETW) AutoLogger sessions.

IBM Security utilitary library in python. Search and query all sources: threat_activities and groups, malware_analysis, industries