Log Examination Tool

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

TheHive is a Cybersecurity Incident Response Management (CIRM) platform, now distributed commercially. Learn more on the official website:

Limit USB devices plugged to a linux host

proxy poc implementation of STARTTLS stripping attacks

SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]

🎯 Prevent RubberDucky (or other keystroke injection) attacks

Parse Yara rules and operate over them more easily.

Leaked Mirai Source Code for Research/IoC Development Purposes

Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch

A Python mail notifier for new ads in leboncoin matching a specified criteria.

Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large dataset.

yarGen is a generator for YARA rules

A tool for forensic file system reconstruction.

Empire is a PowerShell and Python post-exploitation agent.

VBA Obfuscation Tools combined with an MS office document generator

Indicator Extractor

Python Code to Map Cell Towers From a Cellebrite Android Dump

Image super-resolution through deep learning

Encoding Tools for Rubber Ducky

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

🖥️📱🔔 A utility for sending notifications, on demand and when commands finish.

injecting arbitrary codes in memory to bypass common antivirus solutions

A forensic evidence collection & analysis toolkit for OS X

A proof of concept on how one can read private chats done on omegle

A Rekall interactive document for a Memory Analysis workshop/course.

GRR Rapid Response: remote live forensics for incident response

A simple implementation of ZipBomb in Python