Pinned Repositories
aclpwn.py
Active Directory ACL exploitation with BloodHound
cve-2019-1040-scanner
dissect
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
dissect.cstruct_legacy
A no-nonsense c-like structure parsing library for Python
Invoke-ACLPwn
LDAPFragger
linux-luks-tpm-boot
A guide for setting up LUKS boot with a key from TPM in Linux
log4j-finder
Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)
mkYARA
Generating YARA rules based on binary code
quantuminsert
Quantum Insert
Fox-IT's Repositories
fox-it/dissect
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
fox-it/dissect.cobaltstrike
Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles
fox-it/acquire
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
fox-it/dissect.target
The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).
fox-it/dissect.cstruct
A Dissect module implementing a parser for C-like structures.
fox-it/pcap-broker
PCAP-over-IP server written in Golang
fox-it/dissect.ntfs
A Dissect module implementing a parser for the NTFS file system, used by the Windows operating system.
fox-it/dissect-docs
Dissect documentation project
fox-it/flow.record
Recordization library
fox-it/dissect.sql
A Dissect module implementing a parsers for the SQLite database file format, commonly used by applications to store configuration data.
fox-it/dissect.hypervisor
A Dissect module implementing parsers for various hypervisor disk, backup and configuration files.
fox-it/dissect.ole
A Dissect module implementing a parser for the Object Linking & Embedding (OLE) format, commonly used by document editors on Windows operating systems.
fox-it/dissect.regf
A Dissect module implementing a parser for Windows registry file format, used to store application and OS configuration on Windows operating systems.
fox-it/dissect.util
A Dissect module implementing various utility functions for the other Dissect modules.
fox-it/dissect.vmfs
Dissect module implementing a parser for the VMFS file system, used by VMware virtualization software.
fox-it/dissect.volume
A Dissect module implementing a parser for different disk volume and partition systems, for example LVM2, GPT and MBR.
fox-it/dissect-workflow-templates
Workflow templates for the dissect projects
fox-it/dissect.fat
A Dissect module implementing parsers for the FAT and exFAT file systems, commonly used on flash memory based storage devices and UEFI partitions.
fox-it/dissect.ffs
A Dissect module implementing a parser for the FFS file system, commonly used by BSD operating systems.
fox-it/dissect.shellitem
A Dissect module implementing a parser for the Shellitem structures, commonly used by Microsoft Windows.
fox-it/dissect.xfs
A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions.
fox-it/dissect-add-on-for-splunk
A splunk plugin that provides sourcetyping for ingestion and processing of dissect records
fox-it/dissect.btrfs
A Dissect module implementing a parser for the btrfs file system.
fox-it/dissect.extfs
A Dissect module implementing a parser for the ExtFS file system, the native filesystem for Linux operating systems.
fox-it/dissect.thumbcache
A Dissect module implementing a parser for windows thumbcache.
fox-it/dissect.executable
A Dissect module implementing parsers for various executable formats such as PE, ELF and Macho-O.
fox-it/dissect.disc
A Dissect module implementing a parser for file systems commonly used on optical media, such as ISO9660 and several extensions.
fox-it/dissect.jffs
A Dissect module implementing a parser for the JFFS2 file system, commonly used by router operating systems.
fox-it/dissect.squashfs
A Dissect module implementing a parser for the SquashFS file system.
fox-it/PyOxidizer
A modern Python application packaging and distribution tool