ph1nx Goto Github PK

2020submissions

Pwn2Win CTF 2020 flag submissions

abuseipdb-ip-scanner

This Python script utilizes the AbuseIPDB API to check the malicious activity of IP addresses listed in a CSV file.

artifactcollector

🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system

autopsy-plugins

Autopsy Python Plugins

autopsy_addon_modules

Repo to store compiled modules or links to 3rd party add-on modules.

bi0sblr.github.io

Team blog

cloud-forensics-utils

Python library to carry out DFIR analysis on the Cloud

dfir-tools

This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR

email-parser

filesigextractor

FileSigExtractor is a python based tool which extracts the file signatures of all files within a directory and writes the output to a CSV file

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

hight-python

HIGHT block cipher implementation in Python3 based on original paper by Hong et al. Includes the encryption and decryption functions for HIGHT on ECB mode.

ileapp

iOS Logs, Events, And Plist Parser

image-encryption-using-3d-logistic-map-and-improved-chirikov-map

Image encryption using 3D Logistic Map and Improved Chirikov Map

image-encryption-using-pseudo-random-number-generator-and-elliptic-curve-cryptography

The paper titled "A secure authenticated image encryption scheme based on elliptic curve cryptography" proposes a robust method for securely transmitting images, particularly medical ones, by employing an authenticated encryption. This algorithm integrates the LRNG, SGPG, and ECC to enhance the randomness and security of the encryption process.

inctfi-2020

iot-digital-forensics-course

IoT Digital Forensics Course with hands-on labs

leveldb-py

Leveldb Dumper/Viewer

lleapp

Linux Logs Events Application Program Parser

osx-quicklook-parser

Parse the Mac Quickook index.sqlite database

pcrt

PCRT (PNG Check & Repair Tool), a tool to help check and fix the error in a PNG image.

persistencesniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

ph1nx.github.io

splunk4dfir

Harness the power of Splunk for your investigations

sqlite-deleted-records-parser

Script to recover deleted entries in an SQLite database

virustotal-bulk-ip-scanner

This script reads a list of IP addresses from a CSV file, checks each IP address for malicious activity using the VirusTotal API.

windows-defender-quarantine-file-decryptor

Extract quarantine files from Windows Defender

writeups

zcrypt

Basic decryption tool