tstillz / webshell-scan

Related projects ⓘ

Alternatives and complementary repositories for webshell-scan

• tstillz / webshell-analyzer
  Web shell scanner and analyzer.
  ☆103Updated last year
• DarkenCode / yara-rules
  Repository of yara rules
  ☆45Updated 9 years ago
• RomanEmelyanov / CobaltStrikeForensic
  Toolset for research malware and Cobalt Strike beacons
  ☆206Updated last year
• FixTheExchange / Invoke-ExchangeWebShellHunter
  PowerShell script for hunting webshells on Microsoft Exchange Servers.
  ☆54Updated 7 years ago
• la3ar0v / TuxResponse
  Linux Incident Response
  ☆89Updated 5 years ago
• CyberMonitor / Invoke-Adversary
  Simulating Adversary Operations
  ☆93Updated 6 years ago
• olafhartong / detection-sources
  ☆53Updated 5 years ago
• fox-it / cobaltstrike-extraneous-space
  Historical list of {Cobalt Strike,NanoHTTPD} servers
  ☆122Updated 5 years ago
• nccgroup / pybeacon
  A collection of scripts for dealing with Cobalt Strike beacons in Python
  ☆167Updated 3 years ago
• PCsXcetra / DerbyCon-2019Files
  This is a group of tools that I was planning on releasing During Derbycon 2019 talk if it was accepted or with a blogpost if not.
  ☆43Updated 3 years ago
• carbonblack / active_c2_ioc_public
  Active C2 IoCs
  ☆96Updated last year
• jipegit / IncidentsMindMaps
  Cybersecurity Incidents Mind Maps
  ☆32Updated 3 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆94Updated 4 years ago
• kirk-sayre-work / VBASeismograph
  A tool for detecting VBA stomping.
  ☆96Updated 2 years ago
• mandiant / goauditparser
  ☆43Updated last year
• kevthehermit / volatility_plugins
  Volatility Plugins
  ☆62Updated last year
• mitre-attack / joystick
  Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…
  ☆64Updated last year
• cert-lv / exchange_webshell_detection
  Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-2…
  ☆98Updated 3 years ago
• rabobank-cdc / Blue-ATTACK
  The new name is DeTT&CT
  ☆24Updated 5 years ago
• mitre-attack / attack-evals
  ATT&CK Evaluations website (DEPRECATED)
  ☆59Updated 3 years ago
• v1ado / HIPS_LIPS
  Community maintained list of most popular HIPS service and process names on a Windows Platform.
  ☆43Updated 2 years ago
• deadbits / yara-rules
  Collection of YARA signatures from individual research
  ☆42Updated last year
• vysecurity / CobaltSplunk
  Splunk Dashboard for CobaltStrike logs
  ☆85Updated 3 years ago
• fox-it / LDAPFragger
  ☆189Updated 4 years ago
• decalage2 / oledump-contrib
  The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
  ☆52Updated 8 years ago
• InQuest / python-inquestlabs
  A Pythonic interface and command line tool for interacting with the InQuest Labs API.
  ☆34Updated last year
• faisalusuf / ThreatIntelligence
  Tracking APT IOCs
  ☆25Updated 4 years ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆102Updated 2 years ago
• bluscreenofjeff / MalleableC2Profiles
  Malleable C2 profiles for Cobalt Strike
  ☆68Updated 2 years ago
• n0pe-sled / WMI-Persistence
  ☆78Updated 7 years ago