Hilko Bengen

go-yara. Go bindings for YARA

local-log4j-vuln-scanner. [Moved to Codeberg] Simple local scanner for vulnerable log4j instances

local-spring-vuln-scanner. [Moved to Codeberg] Simple local scanner for applications containing vulnerable Spring libraries

go-ntdll. Go interface to NTDLL functions

yara-rules-re. [Moved to Codeberg] Tools for inspecting YARA bytecode

go-cpulimit. Channel-based CPU usage limiter

edr-loadgen. [Moved to Codeberg] Load generator for measuring overhead generated by EDRs and other logging tools on Linux

linux-audit-parser-rs. [Moved to Codeberg] Parser for Linux Audit logs

go-zipsfx. Simple ZIP SFX stub in Go

idapro-debian. [Moved to Codeberg] Debian packaging for IDA Pro

go-grr-apiclient. Go API client for GRR Rapid Response

go-xxtea. Corrected Block TEA / XXTEA library in Go

go-archive-zip-crypto. Fork of Go's archive/zip to add reading/writing of password protected zip files.

velociraptor-api-rs. [Moved to Codeberg] Velociraptor API client in Rust

git-autopatch. Automate repetitive trivial patches in git repositories

dpkg-eatmydata. [Moved to Codeberg] A simple wrapper to make dpkg faster (and unsafe)

nmap-nse-smb2-enhancement. Enhancements for NMAP Script Engine SMB2/3 support

dumb-inject-rs. [Moved to Codeberg] Simple DLL injection demo in Rust

exim-build-test. crude build & test scripts for hacking on Exim

go-splunk-client. [Moved to Codeberg]Splunk REST API client

HandleKatz. PIC lsass dumper using cloned handles

yara. The pattern matching swiss knife

cgo-util-callbackdata. Safe callback data handling for CGO