cisagov / ESXiArgs-RecoverView external linksLinks
A tool to recover from ESXiArgs ransomware
☆303Feb 10, 2023Updated 3 years ago
Alternatives and similar repositories for ESXiArgs-Recover
Users that are interested in ESXiArgs-Recover are comparing it to the libraries listed below
Sorting:
- IP address filter by City☆12Jan 17, 2025Updated last year
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆28Apr 22, 2023Updated 2 years ago
- A web scraper to create MISP events and reports☆17Jun 30, 2025Updated 7 months ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 3 years ago
- Can you pay the ransom in your country?☆14Dec 18, 2023Updated 2 years ago
- LPE exploit for CVE-2023-21768☆421Mar 8, 2023Updated 2 years ago
- A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.☆190Dec 10, 2025Updated 2 months ago
- ☆513Oct 7, 2024Updated last year
- A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE AT…☆1,207Feb 3, 2026Updated last week
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆20May 27, 2025Updated 8 months ago
- ☆16Apr 21, 2023Updated 2 years ago
- bad stuffs by bad guys☆49Jul 28, 2022Updated 3 years ago
- ☆67Sep 1, 2023Updated 2 years ago
- MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…☆15Dec 24, 2023Updated 2 years ago
- Quick ESXi Log Parser☆28Oct 20, 2025Updated 3 months ago
- Slides and videos from talks given at cons☆25Jun 19, 2025Updated 7 months ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆35Mar 28, 2023Updated 2 years ago
- Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts☆127Dec 23, 2025Updated last month
- Powershell module for VMWare vSphere forensics☆158Nov 8, 2024Updated last year
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆41Oct 20, 2020Updated 5 years ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,924Jan 20, 2026Updated 3 weeks ago
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,369Oct 22, 2025Updated 3 months ago
- ☆55Apr 25, 2023Updated 2 years ago
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆11Aug 14, 2025Updated 6 months ago
- Scans a list of raccoon servers from Tria.ge and extracts the config☆15Jun 5, 2023Updated 2 years ago
- Subdomains scanner Spider☆13Feb 29, 2024Updated last year
- Azure AD enumeration over MS Graph☆82Nov 30, 2022Updated 3 years ago
- Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows…☆2,048Dec 11, 2024Updated last year
- Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.☆482Jul 9, 2024Updated last year
- Sandman is a NTP based backdoor for hardened networks.☆816Mar 31, 2024Updated last year
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆861Jan 20, 2022Updated 4 years ago
- ☆194Feb 6, 2024Updated 2 years ago
- RedEye is a visual analytic tool supporting Red & Blue Team operations☆2,740Oct 20, 2023Updated 2 years ago
- ☆617Jun 1, 2023Updated 2 years ago
- ☆67Jun 20, 2023Updated 2 years ago
- The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Produc…☆450Jun 16, 2023Updated 2 years ago
- ☆120Oct 5, 2022Updated 3 years ago
- Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in…☆944Updated this week
- Collect information of Windows PC when doing incident response☆252Jun 5, 2023Updated 2 years ago