ccdev-labs Goto Github PK

helk

The Hunting ELK

hellsgateppid

Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process

hxtool

HXTool is an extended user interface for the FireEye HX Endpoint product. HXTool can be installed on a dedicated server or on your physical workstation. HXTool provides additional features and capabilities over the standard FireEye HX web user interface. HXTool uses the fully documented REST API that comes with the FireEye HX for communication with the HX environment.

impacket

Impacket is a collection of Python classes for working with network protocols.

ioring_demos

A repository for I/O ring demos, use cases and performance testing on Windows

ipwhois

Retrieve and parse whois data for IPv4 and IPv6 addresses

jarv1s-disassembler

Disassembly Generation and Processing for JARV1S

kafka-connect-splunk

Kafka connector for Splunk

kafkacat

Generic command line non-JVM Apache Kafka producer and consumer

kansa

A Powershell incident response framework

kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

kernelreadwritememory

Simple code to manipulate the memory of a usermode process from kernel.

librdkafka

The Apache Kafka C/C++ library

logstash

Contains Logstash related content including tons of Logstash configurations

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

markdown-here

Google Chrome, Firefox, and Thunderbird extension that lets you write email in Markdown and render it before sending.

mordor

Re-play Adversarial Techniques

mux

A powerful HTTP router and URL matcher for building Go web servers with 🦍

nemea-detectors

Detection modules of the Nemea system.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

ntdsxtract

Active Directory forensic framework

openioc_1.1

ossem

Open Source Security Events Metadata (OSSEM)

pecmd

Prefetch Explorer Command Line

peexplorerv2

Portable Executable Explorer version 2

peparser

Portable Executable parsing library, used by PEExplorer. Also available as a nuget package

plaso

Super timeline all the things

posh-r2

PowerShell - Rapid Response... For the incident responder in you!

pound

The Pound program is a reverse proxy, load balancer and HTTPS front-end for Web server(s).

powershell_ipv4networkscanner

Powerful asynchronus IPv4 network scanner for PowerShell