Discover ANSSI-FR/ProTIP Open Source project by ANSSI (@ANSSI-FR)

Collaborative malware analysis framework

465

polichombr

Multi Layer Archive - A pure rust encrypted and compressed archive file format

373

MLA

Machine Learning for Computer Security

322

SecuML

Library for elliptic curves cryptography

271

libecc

258

DFIR-O365RC

PowerShell module for Office 365 and Azure log collection

PowerShell

240

ORADAD

Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data

SmartPGP is a JavaCard implementation of the OpenPGP card specifications

215

SmartPGP

Java

178

ASCAD

Side Channels Analysis and Deep Learning

CRY.ME (CRYptographic MEssaging application)

174

cry-me

Kotlin

168

ultrablue

User-friendly Lightweight TPM Remote Attestation over Bluetooth

Kotlin

163

ctf

Epreuves de sélection de la TeamFR pour l'ECSC 2019.

Active Directory permissions (ACL/ACE) auditing tools

156

AD-permissions

PHP

144

DFIR4vSphere

Powershell module for VMWare vSphere forensics

tabi

bootcode_parser

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

Active Directory Group Policy analyzer

SysvolExplorer

Full-bin indexation of binary files

Binacle

A RADIUS authentication server audit tool

audit-radius

Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", afin de détecter des anomalies dans les évènements futurs

AnoMark

Extract BITS jobs from QMGR queue and store them as CSV records

bits_parser

BGP Route Leaks Detection

route_leaks

Discover SPOF in DNS dependency graphs

transdep

SecAESSTM32

Bibliothèque C et assembleur permettant le chiffrement/déchiffrement AES-128 de messages pour des composants grand public (famille STM32F3/STM32F4)

x509-parser

a RTE-free X.509 parser

guide-journalisation-microsoft

Guide journalisation Microsoft

PowerShell

mabo

MRT Parser

OCaml

chipsec-check

Tools to generate a Debian Linux distribution with chipsec to test hardware requirements

Shell

lidi

Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction

Web interface to explore Suricata EVE outputs

shovel

JavaScript

picon

Picon

nogaxeh

Tools for analyzing hexagon code

Secure AES128 Encryption Implementation for ATmega8515

secAES-ATmega8515

Assembly

OVALI

Generic graph exploration, manipulation and visualization tool (Outil de Visualisation et Analyse de Liens Inter-objets)

JavaScript

Open-ISO7816-Stack

This project aims to provide an open-source implementation of the ISO7816-3 communication protocol from the reader side. This protocol is ruling the interactions between a smartcard and a card-reader when using its contacts to communicate

packetweaver

A Python framework for script filing and task sequencing

A VHDL IP for ECC (Elliptic Curve Cryptography) hardware acceleration

IPECC

VHDL

ADCP-DirectoryCrawler

AD-control-paths LDAP submodule

WAAD

Détection d'anomalie à partir des journaux d'authentification Windows

CardStalker provides a UART-driven smartcard reader at the T=1 (see ISO7816-3) level (link and physical layer), where most of the smartcard reader devices on the market are only providing an APDU interface (application layer).

cardstalker

sftp2misp

Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.

mdbook preprocessor for generating checklists and indexes

mdbook-checklist

Outil de gestion de version statique de site web

cornetto

JavaScript

pciemem

Linux kernel module for driving an USB3380 board, exposing a /dev/pciemem device node on the analysis machine representing the physical memory of the machine under test

ORADAZ

Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data

XML Schema Validator Generator

xsvgen

OCaml

coq-prelude

General-purpose monad typeclass hierarchy for Coq

Coq

scep

Security Contexts for Enhanced Protection Linux Security Module

libdrbg

A portable library implementing NIST SP 800-90A DRBGs

Faults_analyzer

Logiciel d'analyse de campagnes de perturbations sur composants

A Hugo theme to host Capture-The-Flag (CTF) challenges as a static website like hackropole.fr.

hackropole-hugo

HTML

caradoc

A PDF parser and validator

WSUS_Audit

Auditing scripts for WSUS infrastructures

DroidWorks

libapn is a header-based C++ library developed to study vectorial Boolean functions, including but not limited to APN functions.

libapn

A Python library to ease the development of encoders and decoders for various protocols and file formats; contains ASN.1 and CSN.1 compilers.

pycrate

ADCP-libdev

AD-control-paths libraries submodule

caml-crush

Caml Crush: an OCaml PKCS#11 filtering proxy

Faults_experiments

Résultats bruts de campagnes de perturbation de composants réalisées par le laboratoire de sécurité des composants de l'ANSSI

A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.

eurydice

DECODE

Malware detection tool for Windows PE files based on DFIR ORC data