This is your work, valued

Behind You!

TheHermit

Elite
@kevthehermit

Just anther DFIR Geek

PasteHunter. Scanning pastebin with yara rules

1.1k

RATDecoders. Python Decoders for Common Remote Access Trojans

1.1k

DuckToolkit. Encoding Tools for Rubber Ducky

449

VolUtility. Web App for Volatility framework

387

YaraPcap. Process HTTP Pcaps With YARA

108

SpearPhisher. A Web Application to Send and Track Spear Phishing Campaigns

100

pentest. Just a collection of pentest stuffs

94

volatility_plugins. Volatility Plugins

64

YaraManager. Web based Manager for Yara Rules

57

dc-toolkit. Python tools for interacting with a DarkComet Client

54

Maildb. Python Web App to Parse and Track Email and http Pcap Files.

54

YaraRules. My Yara Rules Collection

52

Scripts. Just a collection of scripts

40

volatility_symbols. Volatility Symbol Generator for Linux Kernels

37

yaraMail. Yara Scanner For IMAP Feeds and saved Streams

28

attackerkb-api. Python Library for AttackerKB API

13

CVE-2020-10560. CVE-2020-10560 OSSN Arbitrary File Read

8

maltrieve. A tool to retrieve malware directly from the source for security researchers.

8

mollusc. Web App for Cowrie Honeypot

7

CVE-2020-11651. PoC for CVE-2020-11651

6

malconf-samples. Malconf samples for testing - Keeps the main repo light

5

bashbunny-payloads. Payloads for the Hak5 Bash Bunny

5

attackerkb-slack. AttackerKB Slack App

4

EnScripts. EnCase Scripts

4

malwareconfig-miner. MineMeld Miner for Malwareconfig.com C2 Domains

4

JAWS. JAWS - Just Another Windows (Enum) Script

3

hpfeeds. Honeynet Project generic authenticated datafeed protocol

2

Docker. Docker Builds

2

opensource-socialnetwork. Open Source Social Network (OSSN) is a social networking software written in PHP. It allows you to make a social networking website and helps your members build social relationships, with people who share similar professional or personal interests. It is available in 10 international languages.

2

MeshCentral-RogueAgent. A RogueAgent and exploit chain for MeshCentral

2

miniprint. A medium interaction printer honeypot 🍯

1

de4dot. .NET deobfuscator and unpacker.

1

viper. Binary analysis and management framework

1

viper-docker.

1

Ghidra-Scripts. A Collection of Ghidra Scripts

1

pype32. Yet another Python library to read and write PE/PE+ files.

1

MineMeld-Dynamoo-Miner. MineMeld Miner for Dynamoo

1

Ultimate-RAT-Collection. For educational purposes only, exhaustive samples of 500+ classic/modern trojan builders including screenshots.

1

dnSpy. .NET debugger and assembly editor

1

salt. Software to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt software package repository here:

1