Lionel

static_file_analysis. Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

smuggling_detect. Try to detect HTTP desync attack (https://portswigger.net/blog/http-desync-attacks-request-smuggling-reborn)

logstash-plugins. My logstash plugins. Filter: sig (for security detect -> IOC, sig, New value, Reference, link, frequence, ...). Output: alert created by filter sig, feed FIR (CERT SG)

EAL. Extract Artefacts Linux for forensic (EAL)

dfa. Dynamic File analysis for malicious files (cuckoo/PIN/DynamoRIO in virtualbox dockerized)

AEE. Projet d'analyse exhaustive d’événements

docker-bastion. Bastion guacamole

VolUtility. Web Interface for Volatility Memory Analysis framework from https://github.com/kevthehermit/VolUtility

Divers. Divers Security (codes, papers, tools, ...)

SLDS. Secure Linux Debian Script

Awesome-lists. Awestome list of IT resources.

Vuln_search. Docker contains security tools for find vuln in programs (radare2, bap [modified], llvm fuzzer, llvm static [modified], ...)

spyre. simple YARA-based IOC scanner (Forked project Spyre)

timeline_Winmemory. Make timeline on dump windows memory

arachni. Web Application Security Scanner Framework

docker-snort. Snort + Pulledpork + Websnort in Docker!