AI-Powered Malware Analysis & Threat Intelligence for Ghidra Transform your static analysis workflow with cutting-edge AI capabilities, comprehensive malware detection, and advanced threat intelligence.
☆164Mar 10, 2026Updated 7 months ago
Alternatives and similar repositories for AskJOE
Users that are interested in AskJOE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆74Mar 6, 2024Updated 2 years ago
- Automation Batch Malware Analyzer using Ghidra headlessAnalyzer☆12Apr 29, 2025Updated last year
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆21Updated this week
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 3 months ago
- Termux website scanner☆22Jun 21, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Ghidra analysis plugin to locate cryptographic constants☆99Updated this week
- A cross-platform plugin for Ghidra that provides deep linking support. This enables the generation of clickable disas:// links that can b…☆45Mar 6, 2026Updated 7 months ago
- ☆37May 19, 2026Updated 5 months ago
- Red Team "Drop and Run" NAC (802.1x) Bypass☆78Aug 5, 2023Updated 3 years ago
- A repo containing some tooling build to assist with reverse engineering malware samples☆16Jul 22, 2023Updated 3 years ago
- GptHidra is a Ghidra plugin that uses the OpenAI Chat GPT to explain functions. With GptHidra, you can easily understand the purpose and …☆405Sep 16, 2023Updated 3 years ago
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆57Aug 26, 2026Updated last month
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆131Dec 6, 2024Updated last year
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆43May 18, 2026Updated 5 months ago
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆19May 27, 2026Updated 4 months ago
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 8 months ago
- Read-only Windows host hardening auditor in PowerShell with optional AI analysis☆19Updated this week
- Stack String Explorer is a ghidra plugin to find and report stack strings (and other constant strings). Identified strings are commented …☆28Aug 20, 2024Updated 2 years ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆53Jan 9, 2026Updated 9 months ago
- C++ Staged Shellcode Loader with Evasion capabilities.☆96Oct 7, 2024Updated 2 years ago
- CLI interface to get Ransomware attacks data from ransomwhat.telemetry.ltd☆13Feb 8, 2023Updated 3 years ago
- Binary Type Inference Ghidra Plugin☆179Jun 8, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Example code samples from our ScriptBlock Smuggling Blog post☆96Jun 18, 2024Updated 2 years ago
- Examples of various container types for Python and Golang☆17Aug 29, 2025Updated last year
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆195Nov 27, 2024Updated last year
- ☆27May 16, 2023Updated 3 years ago
- A modular C2 framework developed in Python for cybersecurity research and adversary emulation. Features encrypted communication, agent bu…☆20Oct 4, 2026Updated 2 weeks ago
- Microsoft Applocker evasion tool☆39Nov 26, 2019Updated 6 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Enumerate information from NTLM authentication enabled web endpoints 🔎☆33Aug 16, 2023Updated 3 years ago
- ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.☆56Jul 15, 2023Updated 3 years ago
- Abuse leaked token handles.☆135Dec 14, 2023Updated 2 years ago
- ☆24Sep 9, 2025Updated last year
- Python bindings for BochsCPU☆39Aug 10, 2025Updated last year
- Qemuno Framework☆24Sep 8, 2022Updated 4 years ago
- A Golang Discord C2 unlike any other. DCVC2 uses RTP packets over a voice channel to transmit all data leaving no operational traces in t…☆131Nov 5, 2024Updated last year