nccgroup / mimikatz-detector-busylightView external linksLinks
USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is executed, a thread is spwaned by default that tries to locate one of the busylights that is supported. All HID devices are enumerated, if PID/VID is matching then packets are sent to flash the busylight in differen…
☆21Sep 6, 2022Updated 3 years ago
Alternatives and similar repositories for mimikatz-detector-busylight
Users that are interested in mimikatz-detector-busylight are comparing it to the libraries listed below
Sorting:
- The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent …☆41Sep 6, 2022Updated 3 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 3 years ago
- MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…☆15Dec 24, 2023Updated 2 years ago
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆28Apr 22, 2023Updated 2 years ago
- A service container for interacting with SRA's VECTR☆16Apr 9, 2025Updated 10 months ago
- single-threaded event driven sleep obfuscation poc for linux☆37Jun 14, 2025Updated 8 months ago
- A web scraper to create MISP events and reports☆17Jun 30, 2025Updated 7 months ago
- An automatic Bot that generates and checks Fortnite gift codes.☆10Jan 9, 2021Updated 5 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Jan 18, 2023Updated 3 years ago
- Reverse Engineering and Debugging Malware☆32Feb 27, 2023Updated 2 years ago
- Official implementation for the paper "On deceiving malware classification with section injection"☆36Aug 16, 2022Updated 3 years ago
- Can you pay the ransom in your country?☆14Dec 18, 2023Updated 2 years ago
- Simplified version of a common crawl fetcher☆17Dec 24, 2025Updated last month
- Command Augmentation support for BOFs and .NET assemblies across agents☆39Jan 12, 2026Updated last month
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆21Mar 22, 2024Updated last year
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- OCL Hashcat username to decrypted password recombiner☆15May 21, 2015Updated 10 years ago
- A UserScript to detect GPT generated comments on Hackernews.☆13Dec 10, 2022Updated 3 years ago
- visually see issues with supported cipher suites☆17Jun 18, 2024Updated last year
- Another Portable Executable files analysing stuff☆21May 28, 2011Updated 14 years ago
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆48Apr 14, 2025Updated 10 months ago
- ☆21Apr 19, 2024Updated last year
- C# Data Collector for the BloodHound Project, Version 3☆37Dec 28, 2021Updated 4 years ago
- HVNC hidden remote VNC desktop with filemanager and backconnect☆42Dec 18, 2024Updated last year
- A script made to validate numerous cryptographic-related vulnerabilities such as: Heartbleed, Logjam, CRIME,POODLE, DROWN, Weak Cipher Su…☆19Jul 25, 2016Updated 9 years ago
- Welcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding in…☆25Feb 6, 2023Updated 3 years ago
- A framework for easy payloads development and deployment, collection of customizable XSS payloads☆26Feb 20, 2022Updated 3 years ago
- Malicious DLL Generator in Py3☆27Jul 8, 2020Updated 5 years ago
- A fast wordlist to nthash converter☆21Nov 22, 2021Updated 4 years ago
- OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.☆90Mar 2, 2022Updated 3 years ago
- #1 DISCORD AIO☆41Mar 10, 2024Updated last year
- Tor onion address lookup☆59Jan 5, 2026Updated last month
- Notification webhook for GoPhish☆58Jun 10, 2024Updated last year
- A collection of scripts to aid in reverse engineering and exploit development.☆24Oct 3, 2021Updated 4 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆25Sep 29, 2023Updated 2 years ago
- Extension functionality for the NightHawk operator client☆26Nov 3, 2023Updated 2 years ago
- Ansible build for Afl++ Frida-Mode☆25Jun 8, 2024Updated last year
- Open-source web application to keep track of all data processing activities prefigured by GDPR Article 30 "Records of processing activiti…☆23Apr 21, 2023Updated 2 years ago
- Repository that contains a set of purposefully erroneous Yara rules.☆61Jul 23, 2025Updated 6 months ago