ANSSI (@ANSSI-FR)

Top repositories

1

AD-control-paths

Active Directory Control Paths auditing and graphing tools
C
650
star
2

rust-guide

Recommendations for secure applications development with Rust
Shell
591
star
3

ADTimeline

Timeline of Active Directory changes with replication metadata
PowerShell
466
star
4

bmc-tools

RDP Bitmap Cache parser
Python
465
star
5

polichombr

Collaborative malware analysis framework
Python
373
star
6

MLA

Multi Layer Archive - A pure rust encrypted and compressed archive file format
Rust
322
star
7

SecuML

Machine Learning for Computer Security
Python
271
star
8

libecc

Library for elliptic curves cryptography
C
258
star
9

DFIR-O365RC

PowerShell module for Office 365 and Azure log collection
PowerShell
240
star
10

ORADAD

Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
C++
215
star
11

SmartPGP

SmartPGP is a JavaCard implementation of the OpenPGP card specifications
Java
178
star
12

ASCAD

Side Channels Analysis and Deep Learning
Python
174
star
13

cry-me

CRY.ME (CRYptographic MEssaging application)
Kotlin
168
star
14

ultrablue

User-friendly Lightweight TPM Remote Attestation over Bluetooth
Kotlin
163
star
15

ctf

Epreuves de sélection de la TeamFR pour l'ECSC 2019.
Python
156
star
16

AD-permissions

Active Directory permissions (ACL/ACE) auditing tools
PHP
144
star
17

DFIR4vSphere

Powershell module for VMWare vSphere forensics
PowerShell
138
star
18

tabi

BGP Hijack Detection
Python
109
star
19

bootcode_parser

A boot record parser that identifies known good signatures for MBR, VBR and IPL.
Python
97
star
20

SysvolExplorer

Active Directory Group Policy analyzer
C++
94
star
21

Binacle

Full-bin indexation of binary files
Rust
92
star
22

audit-radius

A RADIUS authentication server audit tool
Python
79
star
23

AnoMark

Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", afin de détecter des anomalies dans les évènements futurs
Python
78
star
24

bits_parser

Extract BITS jobs from QMGR queue and store them as CSV records
Python
73
star
25

route_leaks

BGP Route Leaks Detection
Python
69
star
26

transdep

Discover SPOF in DNS dependency graphs
Go
67
star
27

SecAESSTM32

Bibliothèque C et assembleur permettant le chiffrement/déchiffrement AES-128 de messages pour des composants grand public (famille STM32F3/STM32F4)
C
67
star
28

x509-parser

a RTE-free X.509 parser
C
58
star
29

guide-journalisation-microsoft

Guide journalisation Microsoft
PowerShell
56
star
30

mabo

MRT Parser
OCaml
46
star
31

chipsec-check

Tools to generate a Debian Linux distribution with chipsec to test hardware requirements
Shell
45
star
32

lidi

Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction
Rust
44
star
33

shovel

Web interface to explore Suricata EVE outputs
JavaScript
38
star
34

picon

Picon
C
38
star
35

nogaxeh

Tools for analyzing hexagon code
C++
38
star
36

secAES-ATmega8515

Secure AES128 Encryption Implementation for ATmega8515
Assembly
34
star
37

OVALI

Generic graph exploration, manipulation and visualization tool (Outil de Visualisation et Analyse de Liens Inter-objets)
JavaScript
34
star
38

Open-ISO7816-Stack

This project aims to provide an open-source implementation of the ISO7816-3 communication protocol from the reader side. This protocol is ruling the interactions between a smartcard and a card-reader when using its contacts to communicate
C
33
star
39

packetweaver

A Python framework for script filing and task sequencing
Python
26
star
40

IPECC

A VHDL IP for ECC (Elliptic Curve Cryptography) hardware acceleration
VHDL
26
star
41

ADCP-DirectoryCrawler

AD-control-paths LDAP submodule
C
18
star
42

WAAD

Détection d'anomalie à partir des journaux d'authentification Windows
Python
17
star
43

cardstalker

CardStalker provides a UART-driven smartcard reader at the T=1 (see ISO7816-3) level (link and physical layer), where most of the smartcard reader devices on the market are only providing an APDU interface (application layer).
C
17
star
44

sftp2misp

Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.
Python
15
star
45

mdbook-checklist

mdbook preprocessor for generating checklists and indexes
Rust
13
star
46

cornetto

Outil de gestion de version statique de site web
JavaScript
10
star
47

pciemem

Linux kernel module for driving an USB3380 board, exposing a /dev/pciemem device node on the analysis machine representing the physical memory of the machine under test
C
10
star
48

ORADAZ

Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data
Rust
10
star
49

xsvgen

XML Schema Validator Generator
OCaml
10
star
50

ProTIP

ProTIP permet de caractériser la connectivité réelle entre composants d'une architecture PCI Express
Prolog
9
star
51

coq-prelude

General-purpose monad typeclass hierarchy for Coq
Coq
8
star
52

scep

Security Contexts for Enhanced Protection Linux Security Module
C
7
star
53

libdrbg

A portable library implementing NIST SP 800-90A DRBGs
C
7
star
54

Faults_analyzer

Logiciel d'analyse de campagnes de perturbations sur composants
Python
6
star
55

hackropole-hugo

A Hugo theme to host Capture-The-Flag (CTF) challenges as a static website like hackropole.fr.
HTML
6
star
56

caradoc

A PDF parser and validator
6
star
57

WSUS_Audit

Auditing scripts for WSUS infrastructures
6
star
58

DroidWorks

Rust
5
star
59

libapn

libapn is a header-based C++ library developed to study vectorial Boolean functions, including but not limited to APN functions.
C++
5
star
60

pycrate

A Python library to ease the development of encoders and decoders for various protocols and file formats; contains ASN.1 and CSN.1 compilers.
5
star
61

ADCP-libdev

AD-control-paths libraries submodule
C
5
star
62

caml-crush

Caml Crush: an OCaml PKCS#11 filtering proxy
3
star
63

Faults_experiments

Résultats bruts de campagnes de perturbation de composants réalisées par le laboratoire de sécurité des composants de l'ANSSI
Python
2
star
64

eurydice

A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.
2
star
65

DECODE

Malware detection tool for Windows PE files based on DFIR ORC data
Python
2
star
66

scantru

Non-Profiled Side Channel Analysis on NTRU
Jupyter Notebook
1
star
67

concerto

Toolset to analyse TLS datasets
1
star
68

opkcs11-tool

opkcs11-tool: managing and operating PKCS #11 security tokens in OCaml
1
star