The purpose of these documents, it was to execute several efficiency and detection tests in some endpoint solutions, this document brings the result of the defensive security analysis with an offensive mindset performed in the execution many different Malwares in our lab environment.
☆21Dec 23, 2020Updated 5 years ago
Alternatives and similar repositories for Threat-Hunting
Users that are interested in Threat-Hunting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux kernel internals' notes☆21Jul 7, 2026Updated 4 months ago
- SpyCore - Windows Malicious FIle Scanner (Distributes)☆14Jun 10, 2023Updated 3 years ago
- A 6502-based Commodore 64 assembly language repo for OSX and Ubuntu. This is a very small and targeted OSX and Ubuntu port based on the …☆10Nov 27, 2025Updated 11 months ago
- Powershell script to automate finding privilege escalation vectors in windows environments.☆16Nov 30, 2019Updated 6 years ago
- Digital forensics image that was prepared to cover a full Windows Forensics☆21Dec 26, 2023Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆16Oct 12, 2025Updated last year
- Cyber Threat Intelligence Appliance☆13Dec 8, 2022Updated 3 years ago
- Command-line tool to search for malware samples in various repositories☆14Mar 3, 2022Updated 4 years ago
- Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the…☆239Aug 14, 2026Updated 2 months ago
- Home of https://redteam.guide☆15Aug 17, 2026Updated 2 months ago
- A malicious KeePass plugin to exfiltrate the master key.☆16Oct 25, 2021Updated 5 years ago
- Plugin for NOPing instructions in IDA☆21May 9, 2024Updated 2 years ago
- Challenge files☆11Sep 30, 2021Updated 5 years ago
- Tracking my journey towards earning my OSCP. This includes the process of everything that I learn along the way.☆48Nov 23, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆16Aug 7, 2021Updated 5 years ago
- This repository stores the proof-of-concept of Windows malware categorized with MITRE ATT&CK.☆14Nov 8, 2024Updated last year
- Collection of IDA helpers☆16Jul 25, 2022Updated 4 years ago
- ☆17Oct 15, 2017Updated 9 years ago
- Analyzes AdminSDHolder permissions & compares with default baseline or a previous run, to detect potential backdoor/excessive persistent …☆16Apr 8, 2025Updated last year
- custom impacket mssqlclient☆26Sep 16, 2023Updated 3 years ago
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Jul 27, 2022Updated 4 years ago
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated 2 years ago
- A list of resources to build a information security team.☆20Feb 10, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- Hunting Malicious Macros SANS Threathunting Summit 2021 Materials☆39Oct 9, 2021Updated 5 years ago
- Malware dev. Run shellcode via EnumChildWindows. C++ implementation☆13Jul 14, 2022Updated 4 years ago
- [DEPRECIATED] All writeups are moved to my main website☆14Mar 15, 2024Updated 2 years ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆10Sep 2, 2020Updated 6 years ago
- GUI manager for network tunnels developed for Command and Control systems.☆17Feb 7, 2023Updated 3 years ago
- Yet another Windows DLL injector.☆41Nov 17, 2021Updated 4 years ago
- Twitter keywords monitoring tool☆11Feb 27, 2012Updated 14 years ago
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆20Oct 28, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Sysmon Tools for PowerShell☆12Aug 17, 2018Updated 8 years ago
- ☆11Apr 18, 2018Updated 8 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆16Jan 10, 2024Updated 2 years ago
- A landing page for great justice☆21Sep 1, 2025Updated last year
- Threat Mitigation Strategies☆29Aug 11, 2026Updated 2 months ago
- ☆49Jul 19, 2024Updated 2 years ago
- A concise cheatsheet for using Regular Expressions in JavaScript☆16Jan 30, 2021Updated 5 years ago