Small scripts to help with Linux forensics and incident response.
☆61Sep 29, 2025Updated last year
Alternatives and similar repositories for sandfly-forensic-scripts
Users that are interested in sandfly-forensic-scripts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts to decloak Linux Loadable Kernel Module (LKM) stealth rootkits.☆35Sep 28, 2025Updated last year
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 4 years ago
- Shared library injection for *nix using ptrace, in Rust.☆27Aug 13, 2024Updated 2 years ago
- ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.☆135Apr 13, 2025Updated last year
- Auto exploitation tool for CVE-2024-24401.☆35Sep 7, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆35Jan 8, 2026Updated 9 months ago
- ☆11Sep 26, 2019Updated 7 years ago
- Some security by obscurity using port-jumping.☆14Jul 3, 2026Updated 3 months ago
- Pet EDR Operation - A lightweight, open source EDR for Linux☆26Jun 5, 2026Updated 4 months ago
- Use DNS to hunt for threats including DGAs☆15Jan 4, 2016Updated 10 years ago
- ☆31Mar 3, 2021Updated 5 years ago
- Software in this repository is not maintained anymore☆11Jul 6, 2022Updated 4 years ago
- This repo hosts links to blogs, documentation and assets referenced by the Security Guide Blog.☆11Aug 26, 2026Updated last month
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆20May 20, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Admin Directory Finder is a tool designed to scan and identify directories under admin paths, such as admin/dashboard.php. It helps in se…☆36Aug 31, 2025Updated last year
- A fast, deterministic, non-cryptographic hash for use in hash tables for Rust☆15Jan 12, 2021Updated 5 years ago
- ☆10Mar 7, 2019Updated 7 years ago
- A tool to check microsofts user real endpoint to get data about a tenant.☆16Feb 6, 2025Updated last year
- OpenSSH Vulnerabilities Scanner: Bulk Scanning Tool for 21 different OpenSSH CVEs.☆19Apr 29, 2025Updated last year
- Hunt down social media accounts by username across social networks using httpx☆18Nov 6, 2025Updated 11 months ago
- Advanced Hunting Queries☆21Mar 18, 2026Updated 6 months ago
- ☆75Jan 27, 2025Updated last year
- DRILL (Distributable Remote Integrated Lightweight Link) is a powerful and stealthy Command and Control (C2) framework designed for seaml…☆37Jul 31, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Raven is a powerful and customizable web crawler written in Go.☆40Sep 3, 2024Updated 2 years ago
- Windows Event Log Killer☆11May 22, 2017Updated 9 years ago
- service to convert nfcapd files clickhouse as they are created☆10Mar 22, 2025Updated last year
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆19Oct 28, 2023Updated 2 years ago
- Print the stack trace☆50Mar 8, 2026Updated 7 months ago
- A comprehensive collection of study materials, practice exams, and resources that helped me successfully pass the CISSP exam.☆17Feb 7, 2025Updated last year
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- ☆13Mar 6, 2025Updated last year
- CVE-2024-28955 Exploitation PoC☆34Jul 1, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Simplified version of a common crawl fetcher☆17Aug 19, 2026Updated last month
- Threat-hunting tool for Linux☆1,092Updated this week
- io_uring based rootkit☆261Apr 24, 2025Updated last year
- A simple, lightweight, Redis-backed job queue library☆18Jun 19, 2025Updated last year
- Javascript package that helps to build wasm code by hand.☆15May 3, 2024Updated 2 years ago
- Detect patterns of bad behavior in function calls☆25Jul 21, 2020Updated 6 years ago
- What's the Red Team doing to my Linux Box? - BSides Vienna 2024☆16Nov 23, 2024Updated last year