Standard collection of rules for capa: the tool for enumerating the capabilities of programs

Collaborative forensic timeline analysis

Ghidra is a software reverse engineering (SRE) framework

CVE cache of the official CVE List in CVE JSON 5.0 format

The Official USB Rubber Ducky Payload Repository

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Official list of .gov domains

Community curated list of templates for the nuclei engine to find security vulnerabilities.

A rewrite of YARA in Rust.

Collection of Cyber Threat Intelligence sources from the deep and dark web

Live Feed of Suspected C2 Servers

Directory Services Internals (DSInternals) PowerShell Module and Framework

Returns Logs Events And Properties Parser

🔐 A CLI tool to extract server certificates

Impacket is a collection of Python classes for working with network protocols.

The pattern matching swiss knife

Exchange Server support tools and scripts

Parser for Apple Notes data stored on the Cloud as seen on Apple handsets

Azure Data Exporter for BloodHound

Playground (and dump) of stuff I make or modify for the Flipper Zero

Vehicle Logs Events And Properties Parser

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerab…

E-mails, subdomains and names Harvester - OSINT

DNS Enumeration Script