Reverse Engineer's Toolkit

AssemblyLine4 documentation

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments…

All-in-One malware analysis tool.

Script for automating Linux memory capture and analysis

Image Payload Creating/Injecting tools

The official repo for a project involving a crowdsourced DFIR book. The main purpose of this book is to give anyone interested an opportunity to write a chapter of a book to get their name out ther…

📺(tv) Tidy Viewer is a cross-platform CLI csv pretty printer that uses column styling to maximize viewer enjoyment.

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Tools to assist in forensicating docker

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

code for the Proxy DLL example blog post

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

Sysmon for Linux

ncurses-grep: interactively navigate grep-like results

barq: The AWS Cloud Post Exploitation framework!

Python library to carry out DFIR analysis on the Cloud

Tiny script to verify if a domain or a list of domain is available.

The ultimate WinRM shell for hacking/pentesting

Configuration Hardening Assessment PowerShell Script (CHAPS)

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Attack and defend active directory using modern post exploitation adversary tradecraft activity

PKE Meter - Automated script to search "ghosts" and extract objects from Active Directory

Files for the packer tutorial

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

Example of using ELF hacking to inject malicious code into a target binary

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…