ignacioj Goto Github PK

advanced-process-injection-workshop

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

dllhiding

Hiding x32/x64 Modules/DLLs using PEB

evasiveprocesshollowing

Evasive Process Hollowing Techniques

ignacioj

injection

mellivora

Mellivora is a CTF engine written in PHP

mftf

$MFT parser (from live systems or a copy of the $MFT) and raw file copy utility

ratdecoders

Python Decoders for Common Remote Access Trojans

rc4_encrypt-decrypt

RC4 encryption and decryption tool (c#)

registry_service_triggers

Extract service triggers from SYSTEM registry.

regkeval

Malware detection in registry using a baseline

regripper2.8

RegRipper version 2.8

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

tamperetw

PoC to demonstrate how CLR ETW events can be tampered.

tangledwinexec

C# PoCs for investigation of Windows process execution techniques

tekdefense-automater

Automater - IP URL and MD5 OSINT Analysis

whacamole

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, shellcode, memory regions, modules and processes.

wmi-parser

Parses the WMI object database....looking for persistence

wmiparserstr

WMI OBJECTS.DATA parser