mandiant / Vulnerability-Disclosures

Related projects ⓘ

Alternatives and complementary repositories for Vulnerability-Disclosures

• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆240Updated last year
• REW-sploit / REW-sploit
  Emulate and Dissect MSF and *other* attacks
  ☆139Updated 8 months ago
• nccgroup / pybeacon
  A collection of scripts for dealing with Cobalt Strike beacons in Python
  ☆167Updated 3 years ago
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆111Updated 2 years ago
• 3lp4tr0n / BeaconHunter
  Detect and respond to Cobalt Strike beacons using ETW.
  ☆481Updated 2 years ago
• jsecurity101 / MSRPC-to-ATTACK
  A repository that maps commonly used attacks using MSRPC protocols to ATT&CK
  ☆311Updated last year
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆164Updated 2 years ago
• pucarasec / zuthaka
  Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and othe…
  ☆174Updated 2 years ago
• pan-unit42 / tweets
  ☆130Updated 9 months ago
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆194Updated last year
• StrangerealIntel / Orion
  A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
  ☆138Updated last year
• tyranid / infosec-presentations
  A repository of previous info-sec presentations I've presented.
  ☆156Updated 3 weeks ago
• Immersive-Labs-Sec / msrc-api
  A collection of tools to interact with Microsoft Security Response Center API
  ☆95Updated 10 months ago
• Te-k / cobaltstrike
  Code and yara rules to detect and analyze Cobalt Strike
  ☆262Updated 3 years ago
• jsecurity101 / TelemetrySource
  ☆222Updated 6 months ago
• xforcered / WFH
  ☆181Updated 2 years ago
• mandiant / OfficePurge
  ☆257Updated last year
• DidierStevens / Beta
  Beta versions of my software
  ☆245Updated last year
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆126Updated last year
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆145Updated 3 years ago
• silence-is-best / files
  ☆94Updated last month
• rajiv2790 / FalconEye
  ☆290Updated 3 years ago
• michelcrypt4d4mus / yaralyzer
  Visually inspect and force decode YARA and regex matches found in both binary and text data. With Colors.
  ☆107Updated 7 months ago
• alexey-kleymenov / reverse_engineering_tools
  Various code samples and useful tips and tricks from reverse engineering and malware analysis fields.
  ☆98Updated last year
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆572Updated 6 months ago
• ConsciousHacker / WFH
  ☆407Updated 2 years ago
• byt3bl33d3r / pyMalleableC2
  Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.
  ☆267Updated 3 weeks ago
• evild3ad / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆220Updated 8 months ago
• thefLink / Hunt-Sleeping-Beacons
  Aims to identify sleeping beacons
  ☆489Updated 5 months ago
• arntsonl / calc_security_poc
  A sample of proof of concept scripts that run Calc.exe with full source code.
  ☆91Updated 2 months ago