
ThreatKB
Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation

Python-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…

Enumerate various traits from Windows processes as an aid to threat hunting

TryHackMe CTF writeup — WordPress RCE via CVE-2024-25600, crypto miner forensics, and LockBit ransomware group identification

LD_PRELOAD shared library that hides a Linux process from tools like ps and lsof by intercepting readdir and proc filesystem calls.

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers…

The official Python 3 client library for VirusTotal

Install the tools and start Attacking , black-tool v5.5.5 ! ⬛

The official Go client library for VirusTotal API

Don't Just Search OSINT. Sweep It.

Suspicious DGA from PDNS and Sandbox.

Malware/IOC ingestion and processing engine

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

Different methods to get current username without using whoami