withsecurelabs Goto Github PK

keywe-tooling

Tools that can be used to interact with the KeyWe Smart Lock device.

lazarus-sigma-rules

leonidas

Automated Attack Simulation in the Cloud, complete with detection use cases.

linuxcatscale

Incident Response collection and processing scripts with automated reporting scripts

macostriagecollectionscript

A triage data collection script for macOS

memory-carving-scripts

Scripts for extracting useful information from infected memory dumps

modulestomping

https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/

mongo-rs

A higher-level wrapper on top of the official bson & mongodb crates.

needle

The iOS Security Testing Framework

peas

PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.

physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

ppid-spoofing

Scripts for performing and detecting parent PID spoofing

prototype-pollution

python-exe-unpacker

A helper script for unpacking and decompiling EXEs compiled from python code.

radare2-scripts

A collection of useful radare2 scripts!

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

remotepspy

RemotePSpy provides live monitoring of remote PowerShell sessions, which is particularly useful for older (pre-5.0) versions of PowerShell which do not have comprehensive logging facilities built in.

shadowhammer

Tools related to 'shadowhammer' attack, https://securelist.com/operation-shadowhammer/89992

slide-decks

snake

snake - a malware storage zoo

snake-charmer

snake-charmer - the regression test suite for snake

snake-core

snake-core - the real snake

snake-scales

snake-scales - the default repository of snake scales

snake-skin

snake-skin - the web ui for snake

snake-tail

snake-tail - the command line ui for snake

soccrates_adapters

Helpers for adapting data from Elements Vulnerability Management to be used in Soccrates EU project

tau-engine

A document tagging library

ticktock

usb-ninja-detection-poc

USB Ninja Detection PoC

volatility-plugins