0xhunter213

0xhunter213's Stars

• HavocFramework/Havoc

  The Havoc Framework

  Language:Go6.8k101338959

• qilingframework/qiling

  A True Instrumentable Binary Emulation Framework

  Language:Python5.1k135534745

• mandiant/capa

  The FLARE team's open-source tool to identify capabilities in executable files.

  Language:Python4.8k821k557

• RhinoSecurityLabs/pacu

  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

  Language:Python4.4k110131693

• t3l3machus/Villain

  Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

  Language:Python3.8k68125612

• alexandreborges/malwoverview

  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

  Language:Python3k12135444

• hasherezade/pe-bear

  Portable Executable reversing tool with a friendly GUI

  Language:C++2.7k4836168

• kgretzky/pwndrop

  Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

  Language:JavaScript2k4344259

• gtworek/Priv2Admin

  Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

  2k324266

• mandiant/flare-fakenet-ng

  FakeNet-NG - Next Generation Dynamic Network Analysis Tool

  Language:Python1.8k112100362

• davehull/Kansa

  A Powershell incident response framework

  Language:PowerShell1.6k142114266

• trailofbits/publications

  Publications from Trail of Bits

  Language:Python1.5k13911183

• Bert-JanP/Hunting-Queries-Detection-Rules

  KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

  Language:Python1.2k635230

• RythmStick/AMSITrigger

  The Hunt for Malicious Strings

  Language:C#1.1k138153

• ForensicArtifacts/artifacts

  Digital Forensics artifact repository

  Language:Python1.1k7498206

• jklmnn/imagejs

  Small tool to package javascript into a valid image file.

  Language:C8983711118

• garrettfoster13/sccmhunter

  Language:Python64922679

• gladiatx0r/Powerless

  Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

  Language:Batchfile473141131

• Bw3ll/sharem

  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.

  Language:Python34111753

• HuskyHacks/ShadowSteal

  Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

  Language:Nim2065137

• YARAHQ/yara-forge

  Automated YARA Rule Standardization and Quality Assurance Tool

  Language:Python1597812

• strozfriedberg/cobaltstrike-config-extractor

  Cobalt Strike Beacon configuration extractor and parser.

  Language:Python1459411

• EricZimmerman/RECmd

  Command line access to the Registry

  Language:Rebol130191731

• CCob/Shwmae

  Language:C#1262010

• DissectMalware/pyOneNote

  A python library to parse OneNote (.one) files

  Language:Python1204821

• dicegang/dicectf-quals-2024-challenges

  All challenges from DiceCTF Quals 2024

  Language:C19102

• p0dalirius/hivetools

  A collection of python scripts to work with Windows Hives.

  Language:Python15202

• nass15456/CTFs

  520

• hfz1337/discord-oauth2-webapp

  A simple web application that uses Discord OAuth2 for authentication

  Language:Python2100

• Th3-l4dy/TpSecurity

  Language:Python1100