phulc Goto Github PK

echidna

Network Security Monitoring Framework

elasticsearch-hadoop

Elasticsearch real-time search and analytics natively integrated with Hadoop

elk-forensics

ELK configuration files for Forensic Analysts and Incident Handlers

esper

Esper Complex Event Processing and Event Series Analysis

evtxtract

EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

find-sec-bugs

The FindBugs plugin for security audits of Java web applications and Android applications. (Also work with Scala projects)

fir

Fast Incident Response

forensics

Scripts and code referenced in CrowdStrike blog posts

goohak

Automatically Launch Google Hacking Queries Against A Target Domain

gophish

Open-Source Phishing Toolkit

gray-hacker-and-pentesting

grr

GRR Rapid Response: remote live forensics for incident response

hacker-scripts

Based on a true story

hadoop-pcap

Hadoop library to read packet capture (PCAP) files

hadoop_framework

This is a prototype system that uses Hadoop to process hard drive images.

hidden-tear

an open source ransomware-like file crypter kit

hit

Linux在线内存取证平台(Live Memory Forensic Tools Based on Linux for Rapid Response)

infosec_reference

Information Security Reference That Doesn't Suck

intelmq

IntelMQ is a solution to process data feeds, pastebins, tweets through a message queue.

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

irmempull

PowerShell Memory Pulling script

jcmpp

A Mobile Pentesting Platform

kansa

A Powershell incident response framework

lime

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

liveack

Powershell modular framework for doing live forensic acquisitions in Windows environments

logforensics

web Log Forensics

maltrail

Malicious traffic detection system

malware

Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from: http://www.malwaretech.com

mimikatz

A little tool to play with Windows security