threatexpert

gonc. Netcat with automated NAT traversal, secure P2P, and advanced features for shell access, file transfer, and network proxying.

disk2vmdk. windows下做本地或远程的磁盘镜像的工具，可输出vmdk

SooRDP. SocksOverRDP 隧道工具，基于Windows远程桌面客户端插件接口，实现端口转发

atrk-win. 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。

atrk-linux. Linux下针对rootkit木马的检测工具，可检测隐藏文件、隐藏端口以及隐藏进程。

yarchk. 基于yara规则并发扫描Windows终端所有进程（Scan all processes on a Windows terminal quickly based on YARA rules.）

sihook. simple inline hook, for win/linux | x86 x64

gonc.cc. gonc.cc ns

sshimager. Remote Linux disk imaging over SSH. Creates VMDK/VHD/VDI/DD disk images from a remote Linux machine without installing anything on the target.