Tools

inquest/threatkb

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

aniket2912/all-cehv13-module-wise-pdf-reports

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

captmag/maldev

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation

adityaks/melee

Python-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…

nccgroup/detectwindowscopyonwriteforapi

Enumerate various traits from Windows processes as an aid to threat hunting

anjai7/tryhack3m-bricks-heist

TryHackMe CTF writeup — WordPress RCE via CVE-2024-25600, crypto miner forensics, and LockBit ransomware group identification

iphelix/dnschef

Highly configurable DNS proxy for penetration testers and malware analysts. Forges DNS responses, filters domains, supports multiple record types,…

certtools/intelmq

Message-queue-based threat intelligence feed collector and processor for CSIRTs. Automates ingestion, normalization, and sharing of security…

kasperskylab/klara

Distributed YARA scanning system for threat intelligence researchers to hunt malware across large sample collections via web interface and API.

mrprogrammer2938/black-tool

Multi-purpose penetration testing framework bundling tools for information gathering, web hacking, password attacks, phishing, malware creation,…

ecstatic-nobel/osweep

Splunk app that aggregates OSINT data from 15+ services (VirusTotal, GreyNoise, URLhaus) into unified dashboards for automated threat hunting, IOC…

360netlab/dga

Curated repository of suspicious Domain Generation Algorithm (DGA) domains sourced from passive DNS and sandbox telemetry, with community-validated…

ricardojoserf/whoamialternatives

Different methods to get current username without using whoami

eternalc0der/teleshadow3

Steals Telegram Desktop session files by bypassing two-step verification and security mechanisms, exfiltrating via SMTP or Telegram API with proxy…

ctrlaltint3l/intelligence

Centralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…

bitgodhack/exploit

This is An Offensive Hacking Tool which can be used by hackers and for penetration testing purposes. Hack Responsibly!!!!!!!

silascutler/malpipe

Malware/IOC ingestion and processing engine