Tools for endpoints

Windows privilege-escalation enumerator.

Pattern matching for malware research.

Community YARA rule repository.

Open-source threat-intel platform.

Read-only host scanner for Candiru/AdFection spyware IOCs.

High-speed forensic feature extractor.

Encrypted C2 over DNS.

Capture SSL/TLS plaintext with eBPF.

GPU-accelerated password recovery.

Linux privesc enumeration script.

macOS and iOS forensic artifact parser

Secure in-memory handling of secrets for Rust

Windows credential extraction.

Turn x86/x64 shellcode into polymorphic position-independent VMs.

Generate NTLMv2 hash theft files.

SQL-powered endpoint visibility.

Spy on Linux processes without root.

Mimikatz in pure Python.

Radare2 plug-in for Frida.

Modern file encryption with age.

Read-only MBR/GPT and file-signature inspection toolkit in Rust.

Lightweight firewall that drives the Windows Filtering Platform directly.

SSH server and client config auditor.

Easy SSH honeypot.