cuckoo-modified

This is a heavily modified version of Cuckoo Sandbox provided under the GPL. It offers a number of advantages over the upstream Cuckoo: Fully-normalized file and registry names 64-bit analysis Handling of WoW64 filesystem redirection Many additional API hooks Service monitoring Correlates API cal...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

Kaonashi

Kaonashi Project: RootedCON 2019 This repository contains several directories: Sorted Masks for hashcat Advanced Rules for hashcat Links to download the Kaonishi's Wordlists Slides used in our talk I know your p4$$w0rd and if I don't, I will guess it... at RootedCON 2019 A clone may not be...

EmailXpose

مواصفات EmailXpose وضوح البريد الإلكتروني المدعوم بالذكاء الاصطناعي مرآة HTML: https://roxanneardary.com/emailxpose-specification/ نظرة عامة على المواصفات EmailXpose هو نظام مفتوح المصدر ومعياري لأمن البريد الإلكتروني والاستخبارات يعتمد على الذكاء الاصطناعي، مصمم لتحليل محتوى البريد الإلكتروني...

MOSAIC

🎯 MOSAIC — v1.0.0-alpha Intelligence comportementale multi-plateformes Un framework multi-plateformes axé sur la confidentialité pour l'analyse comportementale et sociodynamique 📺 Démo 🧭 Qu'est-ce que MOSAIC ? MOSAIC n'est pas un simple agrégateur OSINT. Il s'agit d'un framework d'analyse...

BerrySentinel

🫐 Berry Sentinel كاشف سلوكي لاتصالات C2 القيادة والتحكم في الوقت الحقيقي بدون توقيع · تحصين متقدم · مسح عميق · محرك إيقاف ما هو؟ يقوم Berry Sentinel بمراقبة جميع اتصالات الشبكة النشطة في نظامك وتحليل سلوك العمليات التي تولدها للكشف عن النشاط الضار — دون استخدام قواعد بيانات توقيعات مضادات الفيروس...

Pegasus-Malware-Scan

pegasus-malware-scan Description Pegasus Malware Scan is a comprehensive cybersecurity solution designed for advanced threat detection and malware analysis. Built with Python, this powerful tool employs multi-layered detection techniques to identify and neutralize a wide range of malicious...

DrSemu

Dr.Semu Dr.Semu runs executables in an isolated environment, monitors the behavior of a process, and based on Dr.Semu rules created by you or the community, detects if the process is malicious or not. The tool is in the early development stage whoami: @qazqaz With Dr.Semu you can create rules to...

VISION-ProcMon

À propos VISION-ProcMon est un outil dédié à l'analyse de malwares et plus précisément à l'analyse comportementale. VISION-ProcMon combine les technologies Rust et web afin de fournir une visualisation rapide et améliorée du comportement d'un malware après avoir capturé son activité avec l'outil...

fnprint

fnprint matches functions in binaries by what they do , not by what their bytes or control-flow graphs look like. it runs each function in a tiny emulator with made-up inputs, records the side effects it produces, and hashes that behavior into a fingerprint. two functions that behave the same get...

windows-malware-behavioral-analysis

Analyse comportementale de malwares à l'aide de REMnux & FLARE-VM Une enquête pratique de malware pour Blue Team démontrant comment des exécutables Windows suspects peuvent être analysés en toute sécurité dans un laboratoire isolé à l'aide de techniques d'analyse comportementale. Plutôt que de...

vi-bot

BotDetect v2 — Production Bot Detection Library Client-side bot and automation detection library with weighted scoring, behavioral analysis, browser fingerprinting, and configurable thresholds. Detects headless browsers, Selenium, Puppeteer, Playwright, CDP-based tools, and stealth automation...

HSMLog: Small Language Model-Assisted Hardware Security Module Log Anomaly Detection with Behavioral Analysis

Hardware Security Module HSM logs capture security-critical behavior, but anomalies emerge from relationships across event sequences, keys, object states, sessions, and temporal patterns rather than isolated events. Existing methods separate detection from HSM-specific evidence validation and...

Aegis aegis-v0.13.0-alpha

AEGIS OS-level oversight for AI coding agents Open-source monitor that shows what AI coding agents actually do on your machine — at the OS level, no agent hooks required. AEGIS sees every AI agent on your machine — even ones that don't cooperate. It is an independent, OS-level observer that watch...

Explainable Adaptive Zero Trust Framework for AWS with Adversarial Robustness Evaluation

Cloud environments built on Amazon Web Services face a structural security vulnerability: once a credential passes authentication, the resulting session is often treated as trusted for its entire duration. This assumption fails when credentials are stolen. We introduce the Explainable Adaptive Ze...

vet v1.18.2

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...

Aegis aegis-v0.11.0-alpha

AEGIS OS-level oversight for AI coding agents Open-source monitor that shows what AI coding agents actually do on your machine — at the OS level, no agent hooks required. AEGIS sees every AI agent on your machine — even ones that don't cooperate. It is an independent, OS-level observer that watch...

lure v0.4.0

lure Local Linux binary analysis. Zero cloud. Zero root. Zero cost. ⚠️ Early development v0.4.0. Core features inspect, run, diff work end to end on x8664 Linux. This is a young project — expect rough edges, limited error handling on unusual inputs, and missing features. Bug reports, feedback, and...

lure v0.3.1

lure Local Linux binary analysis. Zero cloud. Zero root. Zero cost. ⚠️ Early development v0.4.0. Core features inspect, run, diff work end to end on x8664 Linux. This is a young project — expect rough edges, limited error handling on unusual inputs, and missing features. Bug reports, feedback, and...

lure v0.3.0

lure Local Linux binary analysis. Zero cloud. Zero root. Zero cost. ⚠️ Early development v0.4.0. Core features inspect, run, diff work end to end on x8664 Linux. This is a young project — expect rough edges, limited error handling on unusual inputs, and missing features. Bug reports, feedback, and...