f0r3ns1cat0r Goto Github PK

ios_sysdiagnose_forensic_scripts

Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.

ip2geo

Script to perform bulk local GeoIP lookups (ASN and geo) for IP addresses

ishutdown

itunes_backup_reader

Python 3 Script to parse out iTunes backups

kape-binary-downloads

Script to download binary tools for KAPE modules

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

labs-releases

Elastic Security Labs releases

libesedb

Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.

linkedint

LinkedIn Recon Tool

linux-exploit-suggester

Linux privilege escalation auditing tool

loki

Loki - Simple IOC and Incident Response Scanner

lw-yara

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

mac-locations-scraper

macOS/iOS database location scraper to extract location data

malconfscan

Volatility plugin for extracts configuration data of known malware

malware-indicators

Citizen Lab Malware Reports

malware-ioc

Indicators of Compromises (IOC) of our various investigations

malware-ioc-1

This repository contains indicators of compromise (IOCs) of our various investigations that are published at threatintel.blog

malware-signatures

Yara rules for malware families seen as part of targeted threats project

mbdbls

Parse Manifest.mbdb files from iTunes backup directories

memlabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

metasploit-framework

Metasploit Framework

mimikatz

A little tool to play with Windows security

misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

misp-book

User guide of MISP

misp-docker

MISP Docker (XME edition)

mitigating-web-shells

Guidance for mitigation web shells. #nsacyber

mobileforensics

Scripts developed to help in mobile forensics investigations

mosint

An automated e-mail OSINT tool

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

nccc