Popular repositories Loading

1. chainsaw chainsaw Public

   Rapidly Search and Hunt through Windows Forensic Artefacts

   Rust 3.2k 280

2. doublepulsar-detection-script doublepulsar-detection-script Public

   A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

   Python 1k 315

3. python-exe-unpacker python-exe-unpacker Public

   A helper script for unpacking and decompiling EXEs compiled from python code.

   Python 945 339

4. CallStackSpoofer CallStackSpoofer Public

   A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

   C++ 488 66

5. LinuxCatScale LinuxCatScale Public

   Incident Response collection and processing scripts with automated reporting scripts

   Shell 300 55

6. doublepulsar-c2-traffic-decryptor doublepulsar-c2-traffic-decryptor Public

   A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

   Python 224 81