OsintCase

OSINTCase Based onOSINTMapper by Geistnigma. This project is a modified and extended version of OSINTMapper with additional features and changes focused on investigation case management, intelligence analysis and evidence handling. A browser-based OSINT investigation and case mapping tool. Organi...

scan

Atomdrift Scan Atomdrift Scan is a modern ML-based malware scanner designed to detect 0-day attacks against the software supply-chain. It's designed to be deterministic, fast, and flexible, and embeddable in any workflow or security tool you have in mind, and can operate against files, archives,...

vulnerable-code-snippets

Vulnerable Code Snippets Vulnerabilities | Programming languages | Run a vulnerable code snippet | Installation | Update YesWeHack present code snippets containing several different vulnerabilities to practice your code analysis in a safe dockerized envoriment. The vulnerable code snippets are...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...

SentinelThread-Forensics

🛡️ Sentinel Thread Pro The High-Speed Windows Forensic Triage Platform 📋 The Mission In modern SOC operations, manual EVTX analysis is a death sentence for your MTTR Mean Time to Respond. Sentinel Thread Pro is built to bridge the gap between massive raw event logs and actionable forensic...

qvm-tool

Driver scripts These are the analysis drivers used to produce the measurements quoted in the README and in the case notes. They are argument-driven and reusable : each takes the PE path and output paths on the command line. Run from the repository root, e.g.: python scripts/extendedcensus.py...

xyntia

This repository does not have a README...

obfDetect

Obfuscation Detection Authored by: mcdulltii Automatically detect obfuscated code and other state machines Description: Scripts to automatically detect obfuscated code and state machines in binaries. Implementation is based on IDA 7.4+ Python3. Check out the following blog posts for more...

TEE-reversing

TEE Basics & General Introduction to Trusted Execution Environment: ARM's TrustZone https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html Introduction to TEE original title: TEEを中心とするCPUセキュリティ機能の動向...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry Reproduce DeFi hack incidents using Foundry. 894 incidents included. Let's make Web3 secure! Join Discord Notion: 101 root cause analysis of past DeFi hacked incidents Transaction debugging tools Disclaimer: This content serves solely as a proof of concept showcasin...

AsmResolver

AsmResolver AsmResolver is a library for reading, modifying and reconstructing Portable Executable PE files. It supports PE images running natively on Windows, as well as images containing managed .NET metadata. AsmResolver is released under the MIT license. Main Features AsmResolver has a lot of...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...

conf-presentations

Table of Contents Quarkslab Lectures at Conferences and Seminars Quarkslab Publications in Journals or Conference Proceedings and Preprints Quarkslab Publications in Specialized Magazines Quarkslab Hardware CTFs Quarkslab Lectures at Conferences and Seminars 2026 2026-09: Pwning bluetooth devices...

malware-research

malware-research General malware analysis stuff...

BlockChainSec

Project Introduction This project is mainly used to organize and summarize blockchain security-related resources and technical documentation, mainly covering the following aspects: Basic knowledge Protocol analysis Contract auditing Public chain basics Public chain security Security incidents...

CVE-2026-64633

CVE-2026-64633 Analysis Payloads Files payloads/ — generated payload documents treatment + control variants payloads/manifest.json — payload manifest with pids / pairs...

QR-Exploit-Rdy7d3r

QR-Exploit-Rdy7d3r Pegasus QR-EXPLOIT — A cybersecurity resear...

malware-samples

Malware Samples This repository is intended to provide access to a wide variety of malicious files and other artifacts. All of the samples are in a password protected ZIP archive using a password of: infected Malware Analysis Exercises In addition to providing artifacts from samples, I will...

airdecloak-ng

Airdecloak-ng My Aircrack-ng contribution with Thomas d'Otreppe Description Airdecloak-ng is a tool that removes wep cloaking from a pcap file. Some WIPS actually one actively “prevent” cracking a WEP key by inserting chaff fake wep frames in the air to fool aircrack-ng. In some rare cases,...