Loïc Jaquemet

ctypeslib. Generate python ctypes classes from C headers. Requires LLVM clang

sslsnoop. Live SSH/SSL/TLS decryption - extraction of secret keys from live process memory

python-haystack. Process heap analysis framework - Windows/Linux - record type inference and forensics

python-clang. Python bindings for clang from clang HEAD

python-cymru-services. API to use Cymru services

phash-graph-mvp. Graph a MVP tree from pHash

unhooker. ps fun

python3-adns. adns-python port to python3

ctypes-kernel. python-haystack extensions for kernel structures

bcdedit. BCD editor - Windows Boot Configuration Data

theta. Ricoh Theta Unity firmware deobfuscation

django-mantis. A Framework for managing Cyber Threat Intelligence.

LogRhythmHuntingApp. Python

python-haystack-reverse. Memory forensics data structure reversing

fetch-taleo.

libheap. python library for examining the glibc heap

http-brute-random-uuid-param. Nmap NSE script that try to brute a uuid param using random uuid generation

pastemon. pastebin.com Content Monitoring Tool

django-unicorn-filteredpaginatedview-example. A example of a django-unicorn filtered and paginated view

ingresstools. Python

heaper. heaper, an advanced heap analysis plugin for Immunity Debugger

oraclehash. Oracle Database hash generator

phash-play. Shell

tcpflow-http-extract. extract http content from tcpflow

canalplus. Python

clang. Clang Head

canari3. Canari v3 - next gen Maltego framework for rapid remote and local transform development

fexml2stix. exports FireEye (CMS) alerts to STIX and malware object to Viper storage

skypeopensource. skype open source

pdbparse. pdbparse patches

cuckoo. Cuckoo Sandbox is an automated dynamic malware analysis system

cvelib. A Python library and command line interface for CVE Services.

AIL-framework. AIL framework - Analysis Information Leak framework

Responder. Responder is a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

slides. A slide presentation framework in HTML, JS, and OOCSS

AndrewSpecial. AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

cuckoo-memdump. cuckoo-memdump

deobfuscate. deobfuscate

rtti-helper-scripts. A few IDAPython scripts to generate class hierarchy diagrams from IDBs

community. Volatility plugins developed and maintained by the community

viper. Binary analysis framework

Cortex4py. Python API Client for Cortex

cypherhound. Python3 terminal application that contains 400 Neo4j cyphers for BloodHound data sets and 383 GUI cyphers

NetworkTools. Some helper tools for network pentest

rdap. python rdap client

metasploit-framework. Metasploit Framework

dns-exfiltration. Exfiltrate files via DNS

python-haystack-gui. GUI for Python-haystack

gaphor. Gaphor is a UML modelling tool written in Python

DFTP. Python DNS Exfiltration Tool - Domain Name Service File Transfer Protocol (DFTP) Client and Server. TODO: Integrate Lexer, Parser instead of split()

ruby-haystack. haystack port to ruby. pitfall to ruby-ffi : 1) the generator outputs :pointer types which is basically equivalent to a void_ptr instead of a type_ptr . We cannot do automatic pointer type resolution.

ctypes-libqt. libqt python ctypes structure generated by ctypeslib

mguesser. mguesser guesses a text language

pHash. Github-Repository of the pHash.org library for perceptual hashing.