Extract the Procedures (TTP) from CTI reports
☆18Oct 10, 2026Updated 2 weeks ago
Alternatives and similar repositories for ttpExtractor
Users that are interested in ttpExtractor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆19Mar 19, 2025Updated last year
- What's the Red Team doing to my Linux Box? - BSides Vienna 2024☆16Nov 23, 2024Updated last year
- Lightweight Python-Based Malware Analysis Pipeline☆41Mar 3, 2026Updated 7 months ago
- Convert Microsoft Defender Antivirus Signatures (VDM) into SQL DB☆30Nov 21, 2025Updated 11 months ago
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Ludus role for deploying a Mythic Teamserver onto Linux servers☆24Mar 16, 2025Updated last year
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- Dashboard for Cirro☆15Aug 7, 2026Updated 2 months ago
- install ollama with deepseek on ec2 by cloudfromation☆15Feb 6, 2025Updated last year
- ☆10Aug 24, 2025Updated last year
- Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.☆47Oct 4, 2026Updated 3 weeks ago
- A few BOF files to help facilitate reading and writing bytes to DLL function calls.☆12Jun 16, 2025Updated last year
- HexBrew reads a YAML configuration file and outputs a formula and commands to create a homebrew tap☆18Sep 23, 2025Updated last year
- Ludus range for the Constructing Defense Lab☆142Jul 28, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Credential and sensitive-data exposure triage for file shares☆16Aug 8, 2026Updated 2 months ago
- Some security by obscurity using port-jumping.☆14Jul 3, 2026Updated 3 months ago
- Ruby On Rails unrestricted render() exploit☆16Feb 9, 2018Updated 8 years ago
- Runbook to find threats & track your hunts☆12May 5, 2025Updated last year
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆70Jan 5, 2026Updated 9 months ago
- Script to decrypt / import chromium (edge/chrome) cookies☆14Aug 1, 2023Updated 3 years ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- Vectored Exception Handling Squared☆35Dec 27, 2025Updated 10 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Explore and filter your GitHub starred repositories☆24Dec 5, 2023Updated 2 years ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
- ☆41Nov 25, 2025Updated 11 months ago
- A tool to generate datasets and models based on vulnerabilities descriptions from @Vulnerability-Lookup.☆42Oct 22, 2026Updated last week
- Slides and resources from MCTTP 2025 Talk☆70Oct 26, 2025Updated last year
- Orchestrate detonating redteam artifacts in VMs with different EDRs to see their detection surface.☆89Updated this week
- A fast, deterministic, non-cryptographic hash for use in hash tables for Rust☆15Jan 12, 2021Updated 5 years ago
- LibWinHttp is a simplified WinHTTP wrapper designed as a Crystal Palace shared library for implant development. Its primary purpose is to…☆48Nov 4, 2025Updated 11 months ago
- ETWhat is a Windows utility that determines whether Event Tracing for Windows (ETW) providers operate in kernel mode or user mode.☆10Jun 9, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated last year
- Script to extract the cached credentials from SSSD, getting Active Directory credentials from Unix systems☆27Jun 14, 2023Updated 3 years ago
- Deep Dork Web is a browser-based tool designed to automate Google Dork searches for ethical security research. It supports advanced queri…☆24Mar 13, 2025Updated last year
- ☆11Jun 26, 2024Updated 2 years ago
- A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory via Cobalt Strike☆19Jul 14, 2025Updated last year
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆63Aug 18, 2025Updated last year
- BOF to steal Teams cookies☆132Nov 2, 2025Updated 11 months ago