Explore @NVISOsecurity Open Source projects

NVISO (@NVISOsecurity)

NVISOsecurity

Stars
3,428
Global Org. Rank 6,143 (Top 2 %)
Registered almost 11 years ago
Most used languages

Python
52.8 %

C++
11.1 %

C#
8.3 %

C
8.3 %

PowerShell
5.6 %

Shell
5.6 %

YARA 2.8 %

Go
2.8 %

Swift
2.8 %
Location <UNKNOWN>
Country Total Rank 32

MagiskTrustUserCerts

A Magisk/KernelSU module that automatically adds user certificates to the system root CA store

posh-dsc-windows-hardening

Windows OS Hardening with PowerShell DSC

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

CobaltWhispers

CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process injection, persistence and more, leveraging direct syscalls (SysWhispers2) to bypass EDR/AV

ee-outliers

Open-source framework to detect outliers in Elasticsearch events

binsnitch

Detect silent (unwanted) changes to files on your system

pyCobaltHound

pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound.

frida-ios-playground

An iOS app that lets you practice your Frida skills

evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

Interceptor

Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space

brown-bags

IOXY

MQTT intercepting proxy

decompile-py2exe

Decompile py2exe Python 3 generated EXEs

DInvisibleRegistry

DInvisibleRegistry

blogposts

A repo to house files for our blogposts on blog.nviso.eu

cs2br-bof

nviso-cti

nexus_5_bootloader_unpacker

A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.

FileSearcher

logalert.py

Smart piping of command output to email for alerting.

DLLoader

SEC599-Resources

sigma-public

Generic Signature Format for SIEM Systems

VerifiedBootRPi3

Verified Boot for RPi3

SEC599

SEC599 supporting GitHub repository

cobalt-strike-notifier

YARA

Repository of YARA rules developed by NVISO

ansible-velociraptor

Ansible role for Velociraptor EDR

cloud-security-automation

PowerShell scripts used in the "Incident response in the cloud/ foggy with a ray of sunshine" conference talk

ansible-auditbeat

Ansible role for auditbeat install

ansible-sysmon

Ansible role for sysmon

ansible-thehive

Ansible role for installing The Hive & Cortex

ansible-windowslogconfig

Ansible role for configuring Windows security logs

ansible-caldera

Ansible role for MITRE caldera

assemblyline-service-cape

Assemblyline service build for CAPE's API

ansible-elk

Ansible role for ELK stack install

ansible-winlogbeat

Ansible role for WinLogBeat

BitSight-Automation-Tool

BitSight Automation was developed to automate certain manual procedures and extract information such as ratings, assets, findings, etc. This tool also provides the possibility to collaborate with Scheduled Tasks and cronjobs.

assemblyline-service-python-exe-unpacker

Python exe unpacker service

ansible-covenant

Ansible role for Covenant

assemblyline-service-urlscanio

URLScan.io AL service

assemblyline-service-clamav

Assemblyline service which submits a file to ClamAV and displays the result

assemblyline-service-msg-extractor

Simple MSG extractor AssemblyLine service

ansible-nexusrepo

Ansible role for Nexus Repository OSS

assemblyline-service-steg-finder

AssemblyLine service which scans for embedded data in image using StegExpose

assemblyline-service-malware-bazaar

Assemblyline service fetching Malware Bazaar report

caldex

Caldera exportation plugin to the MITRE ATT&CK™ Navigator.

assemblyline-service-autoit-ripper

AutoIt unpacker service

assemblyline-service-unfurl

Assemblyline service parsing a submitted URL to unshorten it.

cortex.xsoar

The cortex.xsoar collection includes Ansible modules to help automate the management of Palo Alto Cortex XSOAR.