tstillz / webshell-analyzer

Related projects: ⓘ

• tstillz / webshell-scan
  Simple web shell scanner written in Golang.
  ☆86Updated 5 years ago
• la3ar0v / TuxResponse
  Linux Incident Response
  ☆89Updated 4 years ago
• DarkenCode / yara-rules
  Repository of yara rules
  ☆45Updated 9 years ago
• RomanEmelyanov / CobaltStrikeForensic
  Toolset for research malware and Cobalt Strike beacons
  ☆205Updated last year
• Lifars / gargamel
  A forensic evidence acquirer
  ☆85Updated 3 years ago
• lawiet47 / autoresponder
  Carbon Black Response IR tool
  ☆53Updated 3 years ago
• carbonblack / active_c2_ioc_public
  Active C2 IoCs
  ☆96Updated last year
• djhohnstein / cliProxy
  Proxy Unix applications in the terminal
  ☆113Updated 3 years ago
• nccgroup / pybeacon
  A collection of scripts for dealing with Cobalt Strike beacons in Python
  ☆167Updated 3 years ago
• CyberMonitor / Invoke-Adversary
  Simulating Adversary Operations
  ☆93Updated 6 years ago
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆162Updated last year
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆45Updated last year
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆74Updated 2 years ago
• Th1ru-M / Windows-Threat-Hunting
  Hunt for Keywords , Mutex, Windows Event,Registry Keys,Process,Schedule tasks in Windows Machine
  ☆22Updated 3 years ago
• 3CORESec / S2AN
  S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator
  ☆83Updated last year
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆104Updated 2 years ago
• deadbits / yara-rules
  Collection of YARA signatures from individual research
  ☆41Updated 10 months ago
• picussecurity / picuslabs
  Picus Labs
  ☆42Updated 3 years ago
• olafhartong / detection-sources
  ☆52Updated 5 years ago
• BinaryDefense / beacon-fronting
  A simple command line program to help defender test their detections for network beacon patterns and domain fronting
  ☆65Updated 2 years ago
• FixTheExchange / Invoke-ExchangeWebShellHunter
  PowerShell script for hunting webshells on Microsoft Exchange Servers.
  ☆54Updated 7 years ago
• claroty / CVE2020-0796
  CVE2020-0796 SMBv3 RCE
  ☆60Updated 4 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• cyware-labs / Threat-Response-Docker
  ☆43Updated last year
• sisoc-tokyo / Real-timeDetectionAD_ver2
  ☆82Updated 3 years ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆102Updated 2 years ago
• fozavci / ta505plus
  TA505+ Adversary Simulation
  ☆64Updated 3 years ago
• fatihsirin / Tweettioc-Splunk-App
  Tweettioc Splunk App
  ☆20Updated 4 years ago
• hxnoyd / ossem-power-up
  A tool to assess data quality, built on top of the awesome OSSEM.
  ☆76Updated 2 years ago
• cert-lv / exchange_webshell_detection
  Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-2…
  ☆98Updated 3 years ago