melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

RansomCoinPublic

RansomCoin Extracting metadata and hardcoded Indicators of Compromise from ransomware, in a scalable, efficient, way with cuckoo integrations. Ideally, is it run during cuckoo dynamic analysis, but can also be used for static analysis on large collections of ransomware. Designed to be fast, with...

CryptoTester

CryptoTester A utility for playing with cryptography, geared towards ransomware analysis. Hex Views All hex views used in CryptoTester offer a few enhanced capabilities. Null bytes are colored a lighter gray Bytes representing printable ASCII characters are colored orange Newline patterns 0D 0A a...

racketeer

Racketeer Project - Ransomware simulation toolkit The goal of this project is to provide a way for teams to simulate and test detection of common ransomware operation, in a controlled manner, against a set of company assets and network endpoints. Deployment model The Racketeer toolkit operates on...

DFIR_Resources_REvil_Kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack Yesterday Sophos and Huntress Labs identified that Kaseya, a remote management provider popular with MSPs, was compromised to deploy a supply chain ransomware attack. A large number of organisations wer...

gentlemen-decryptor

The Gentlemen Ransomware Decryptor The first publicly available decryption method for The Gentlemen ransomware. The Gentlemen also known as hastalamuerte is currently the most active ransomware-as-a-service RaaS operation globally, with 320+ confirmed victims as of Q1 2026. Until now, every major...

VEN0m-Ransomware

VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

protections-artifacts

保護アーティファクト Elastic Security はランサムウェアやマルウェアを防止し、高度な脅威を検出し、レスポンダーに重要なコンテキストを提供します。無料でオープンソースであり、すべてのエンドポイントで利用可能です。 Protections-Artifacts は、Elastic Security for endpoint の検出ロジック（ルール、YARA など）を管理するリポジトリです。Elastic では、オープンかつ透過的であることが、私たちとユーザーの成功にとって重要であると考えています。詳細については、ブログ記事をご覧ください。 ディレクトリ...

Python-Ransomware

Python-Ransomware Complete Python RansomeWare Source Code With Full Decoumetions. root@kitploit: |/ || |\ | | | |/| | | | || |/ | | / | \ | | | | || | | ||| | | | \ | .| | About: This is a Classic Example Of RansomWare Written in python. Tested On: Windows 10 / Windows7 Suport : +Windows7 Date...

exposecheck

EXPOSECHECK Only run against servers you own or are authorized to test. Scope: a passing result means only that this narrow check found an authentication challenge and a Langflow version at or above the patched threshold for CVE-2025-3248. It is not a general security, reputation, configuration, ...

ransomware-simulator

QuickBuck - Ransomware Simulator root@kitploit: / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware...

PSRansom

PSRansom PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client...

ThreatActors-TTPs

THREAT ACTORS AND RANSOMWARES - TTPs This repository was created with the aim of assisting companies and independent researchers in studying the Tactics, Techniques, and Procedures TTPs , based on the MITRE ATT &CK framework, adopted by active or inactive Ransomware operators/groups and other...

tarian

Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...

ThreatActors-TTPs

NOTE: This is a fork from Crocodyli - All I'm doing is adding to it for my own purposes. I'm using it to power the gapMATRIX pages on https://incidentbuddy.ai THREAT ACTORS AND RANSOMWARES - TTPs This repository was created with the aim of assisting companies and independent researchers in studyi...

RvbbitSafe

RvbbitSafe: The Hacker's Nightmare – A Six-Fortress Anti-Ransomware Architecture for Windows 🛡️ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...

kratosminifilter

🛡️ Kratos Minifilter — Windowsカーネル アンチランサムウェアドライバ 防御セキュリティ研究プロジェクト — C++で開発されたWindowsミニフィルタドライバ。カーネルレベル（Ring 0）でランサムウェアをリアルタイムに検出・無力化します。 📋 目次 概要 アーキテクチャ 検出メカニズム フィンガープリントによるブラックリスト インストール 設定 制限事項 法的注意事項 概要 Kratos（Kratos.sys）は、フィルタマネージャ（fltmgr.sys）を介して高度 425342...

BL00DYM4RY

🎭 Simulador de Phishing del Troyano BloodyMary 📋 Descripción BloodyMary es una herramienta educativa troyano o ransomware para formar a especialistas en ciberseguridad, simulando ataques de phishing realistas con elementos de ingeniería social. Este proyecto fue creado para concienciar sobre las...