Tools for endpoints

High-speed forensic feature extractor.

Encrypted C2 over DNS.

Capture SSL/TLS plaintext with eBPF.

GPU-accelerated password recovery.

Linux privesc enumeration script.

macOS and iOS forensic artifact parser

Secure in-memory handling of secrets for Rust

Windows credential extraction.

Turn x86/x64 shellcode into polymorphic position-independent VMs.

Generate NTLMv2 hash theft files.

SQL-powered endpoint visibility.

Spy on Linux processes without root.

Mimikatz in pure Python.

Radare2 plug-in for Frida.

Modern file encryption with age.

Lightweight firewall that drives the Windows Filtering Platform directly.

SSH server and client config auditor.

Easy SSH honeypot.

Transparent SSH bastion.

Modular Sysmon configuration repo.

Trace any process, port, container or file back to what started it.

Embedded TLS / DTLS library.